Secure Boot V2 FW Signig in production

[aygh4266]

Hello everyone,

I have watched the webinar from espressif abot SBV2 and how to sign the firmware for prodution purposes, so the key should not be get leaked. They use KMS like Thistle. My question is how to deal with a thousand of devices should be signed with different keys. I have seen the idea which is uploading the bootloader image and the firmware image as an input and the KMS will replace the development key with production key.
So how to deal with a thousand of devices which use esp32