Steve Kent from BBN told me how they bootstrapped the original trust anchor which signed over the card conpanies PKI using an HSM module. After they initialised

Steve Kent from BBN told me how they bootstrapped the original trust anchor which signed over the card conpanies PKI using an HSM module. After they initialised the subsidiary CAs they destroyed the private key hardware, and some of them wanted to take bits home to put in lucite as a memento but others were worried it was a skymesh moment and enough information could be gleaned from chip remains they'd reveal the private key. (The public key proof was all they wanted, no reuse intended of this keypair)