Why not model your AI boxes after skulls: Put a physical unclonable function into a tamperproof container & let it provide the core identity