A key-injection facility protects against unauthorised key substitution and against devices operating without legitimate keys, for instance by tracking every device loaded in each session by serial number and by using something unique to the POI, such as a logical identifier, when deriving the DUKPT or TMK key injected into it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.