why is it a barrier? there's already significant local setup implied in establishing trusted keys.