Hey anantgaur — late to this thread, but the concern you raised is the right one to worry about: host-generated keys + a pre-encrypted bin is the safer route precisely because it leaves you a remote path back if someone flashes something wrong on-site. The other thing worth locking down before ...