Comment by nitrogen

Obviously it's not a first step toward certificates, but it is a first step away from "anyone can casually plug in a hidden Pi."