Chain of trust for software update/delivery from what I understand. Nothing good ol' RSA signing could not solve if that is the case.