... call lockdown. In the lockdown world, your TPM comes with a set of signing keys it trusts, ...
... So there's a whole set of trade offs here. ...