Why is a DEF CON badge also a RISC-V hardware key, and what does an open-source chip buy you besides more attack surface?