So we have to approach this incrementally, to build a better future. In a few years, we want only devices with RKP and recent patchlevels to pass. And I hope we'll have a program for certified third party OSes, too! All of our designs take care to leave that option open.