[mike_hearn]

The hardware token is itself a form of remote attestation. The reason you need extra hardware is because the PC can't do it.