Today, the first production EV charger was provisioned into life using the security-focused service infrastructure I was originally brought to The Netherlands to design and implement. Now that this milestone has passed, I may have some time to finally do a write up of the process so perhaps others can reduce their IoT attack surface, and move devices into line with the principle of least privilege rather than the Everyone’s An Admin philosophy that seems to guide so many places.