If unauthorised alteration is suspected, no new key goes into the SCD until the device has been inspected and shown to be free of unauthorised modification.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.