I believe there is precedent for companies having to share/reveal their own encryption keys or in this case the certificate necessary to create a firmware update. The certificate is something Apple owns.