in the course of boot, a PCR from the vTPM is extended Along with the root of this Merkle tree, and later on verified via the KMS prior to releasing the HPKE non-public critical. All subsequent reads from the root https://no-ransom-6dmd.vercel.app