Dear
I am developing an embedded system, which is currently using symmetrical update (2 boot partitions, at update you overwrite the other partition and reboot in the other partition).
The system is used by various users which all have the responsability to maintain their credentials...