I would say, based on my experience that indeed it does require some level of specialization which most don't have today. I'm fighting with an IoT manufacturer

I would say, based on my experience that indeed it does require some level of specialization which most don't have today. I'm fighting with an IoT manufacturer right now because they ship the same root private key on every one of their devices. This is a pretty simple concept to understand: "Are all your device privates derived from the same key? Do you ask your users to install your public root to get past security warnings?" Yet they clearly don't understand PKI 101 and think what they are doing is completely appropriate because they are "following standards" while of course missing the bigger picture entirely.