@lorenc_dan @mjmalone @apenwarr @ErrataRob I think that's one way to describe it. I think it's also that for a personal device, physical separation of the owner's security token from the device should render the device unusable. There were some similar ideas in BitVisor: https://t.co/FRQHaBKrQW