@GrapheneOS @lispi314 @maumau @fluffery @kkarhan @BryanGreyson If you want to have a key that allows non-destructive update too, that's fine.
The important thing is that it always be possible to do a destructive update to absolutely any code you want to put there, without needing to possess any key.