Comment by pietervdvn

I'd even count this as "having local access to the device", as that is what is needed to install such a cert