This doesn't solve anything, sadly. You are entirely at the behest of Bigco as to whether they will require keys signed by any particular device's certificates

This doesn't solve anything, sadly. You are entirely at the behest of Bigco as to whether they will require keys signed by any particular device's certificates, and they have no incentive to allow interoperability here.