Locked bootloader support: bootloader will disallow installation of unofficial firmware unless the Optiga pairing secret is erased.