through boot, a PCR in the vTPM is extended With all the root of this Merkle tree, and afterwards confirmed because of the KMS right before releasing the HPKE personal critical. All subsequent reads from the basis https://no-ransom-6dmd.vercel.app