Add configuration option(s) to specify BLE mac-address(es) as a maintenance trigger, putting the device into a state similar to the deployment mode - allowing read-write access to the storage/filesystem.
Because these mac-addresses can be "faked", the configuration settings (settings.toml) should either be deleted/shredded after deployment or be configured using its hash value.