Require confirmation when installing non-full trust firmware image on empty device