Yes to all of that. * Admin-controlled certs and mutual TLS for the webface. * send a webhook for each snapshot, maybe sign and ship the image somewhere durab

Yes to all of that. * Admin-controlled certs and mutual TLS for the webface. * send a webhook for each snapshot, maybe sign and ship the image somewhere durable You could likely work out a recurring charge per unit for these features. I.e. enterprise buys the units at normal price and then pays $100/unit/year for enterprise features. Remember that you're competing here against the hardware vendor's on-board management. That's not usually free or as flexible as you can be. Also I want to emphasize something that the parent poster said. Medium and large companies have to fulfill legal and certification obligations (SOX, SOC1/2) that require them to defend against audit challenges. If you can tie into that story and satisfy their compliance controls with just a little configuration these companies will buy.