Comment 2 for bug 1649237

UX document says that installation needs to advise of the existence of --devmode, and installing with --devmode needs to prompt with a warning unless the developer is completely trusted.

Without the two second bits of this the first can't be implemented, however, which is why we're at.

So, this is blocked by:

 * server-side "channel map" support
 * confirmation step for --devmode
 * per-dev explicit blind trust

HTH,