Factory deployment

Factory creation is protected by the admin PIN and an allowlisted wallet signature. TwinPad never holds the deployer key.