2026-04-15 23:26:01
What if #firmware gave you an interface to manage access tokens, just like OAuth?
For the owner, have some password/PIN/key (think WebAuthn or similar) mechanism.
There be an authenticated (!) API for the OS to provision/reconfigure.
On first boot, possibly offer a TOFU based scheme; i.e., the OS gets an initial token, and the end user can export it, use it to set a different …