[adestefan]

But that uses TPM backed keys only protected by the TPM PSRs. Someone could still swipe your box and unlock the disk.