If you can modify firmware, you've probably already won. Unless the auth is done remotely and requires remote attestation, perhaps.