Is this true? Can you set your own root of trust for the firmware signing key and build and deploy it yourself?