thinking about self-embedded, time-locked firmware upgrades