I'm so confused he adds a JSON field and corporate linux (who fund 95% of Linux development) need some sort of age auth mechanism for enterprise deployments. What do you guys want instead?
Like its not even enforceable, when the hardware attestation comes sure but before that why does anyone care (thats not going to stop you from changing a json field in systemd lmao)
well someone has to implement it somewhere on the stack. systemd seems like a good candidate ?