Once the code is developed, it would be great if there was a physical way to prevent firmware rewriting (such a fuse to blow or a wire to cut)