Look into SeedQR and stateless signing.

Verify firmware signatures before running it.