If the device has a manufacturer&#x27;s key and the user&#x27;s key, then it&#x27;s basically down to simple Boolean logic: does the innermost trusted layer allow something to be installed or altered if it is authorized by the manufacturer&#x27;s key OR your key? Or the manufacturer&#x27;s key AND your key? Or just your key? (With a warning if it has no other key?)