> They are supposed to be mathematically non-exportable, device-bound.

Which would make the whole scheme unworkable (at least for me).