A clever system would easily mitigate your first point, probably with some sort of rolling key + key hierarchy (much like SSL and certificate authorities). As

A clever system would easily mitigate your first point, probably with some sort of rolling key + key hierarchy (much like SSL and certificate authorities). As to your second point, yes. It would require severely limiting a great deal of things. Consider that "impossible" at your peril.