Comment by spdustin

Use MQTT for all interop, and allow config to be changed via captive on-device portal. Put OTA keys in escrow if you insist on restricting firmware updates, so keys can get freed if SHTF.