The Ed25519 public key made by npm run fw:keygen. Firmware that is not signed with its private half is refused.
npm run fw:keygen
A secret key is made for the app. Put it in the device's configuration; it sends it to ask for and download builds.