... specify who was allowed to sign their bootloaders, operating systems, and so on. ...
... sign SYS to their program files and their processes because if they ever found themselves ...