I was told the decision to use a one-time seeded cryptographic key to sign over the original card partners (when they adopted PKI) and then destroy the private key caused some ructions when the tech execs wanted to keep shards of the destroyed hardware in lucite: sombody was concerned key recovery would be possible.