This doesn't really help; now you're requireing people to know a password for their firmware -- something most people don't have as it is. Heck, they don't even have a password for the users on the desktop operating system (i.e. windows). This doesn't make the problem with increasing the installation complexity go away; it just changes it.