This would keep the key private, but would not contain the potential for abuse. The appliance owner could still invoke whatever mechanism is used to generate ce

This would keep the key private, but would not contain the potential for abuse. The appliance owner could still invoke whatever mechanism is used to generate certs for arbitrary hostnames.