Our Alternative to this issue is to permit updates for the support code at any point, as long as the update is created transparent initially (as stated in our current CACM post) by adding it to some tamper-evidence, https://bookmarkmoz.com/story18358896/the-definitive-guide-to-confidential-employee