I’m still getting a handle on what my requirements would be. I want to have root key and a bunch of (disposable) controller keys. The device could sign an inception event and a key rotation event indicating the current controller key. That’s about it.