Maybe it's possible to have a server somewhere without having to trust your provider? Use this in tandem with chassis intrusion detection, epoxy, and probably other things I'm not aware of.