should have it all! reproducible builds without firmware attestation is useless too