Easier is to just let the user compile and reflash the firmware themselves. But yeah you could give the user access to the devices private keys and certificate

Easier is to just let the user compile and reflash the firmware themselves. But yeah you could give the user access to the devices private keys and certificate store.