... call lockdown. In the lockdown world, your TPM comes with a set of signing keys it trusts, ...
... evident. If you try to extract the keys from a TPM, it's supposed to be really obvious ...