... their machine's root of trust, they punch holes in the network perimeter by accident, ...
... is first opened by the customs authority, who installs a root of trust that's run by ...