> (after all, how would you vouch for an input device without using an input device?). Allowing the first keyboard after boot by default seems not unreasonable

> (after all, how would you vouch for an input device without using an input device?). Allowing the first keyboard after boot by default seems not unreasonable. It would still make it possible for evil maids to plug in something and wait for you to boot up again, but they are difficult to protect against anyhow. This would also avoid the hassle of vouching for your keyboard every time you reboot.