Hi, reading through https://signstar.archlinux.page/architecture/design.html can someone explain how the SSS shares are distributed among holders? Do they physically meet for a beer and each takes out a print out from initial console setup? Could you perhaps pre-bake share holder's SSH keys into the image and do a one share per key as the do first login? This way they could retrieve it remotely. My second question is if confidential compute was considered instead of a dedicated physical hardware and OS? Could you replace the setup with a confidential VM that runs signstar as verifiable service?