[nitrogen]

In light of https://news.ycombinator.com/item?id=6980058 and https://www.usenix.org/system/files/conference/woot12/woot12..., you also need a way of verifying that your BIOS chip is a dumb EEPROM or verifying its own micro-firmware.