through boot, a PCR on the vTPM is extended with the root of this Merkle tree, and later on verified via the KMS prior to releasing the HPKE personal key. All subsequent reads through the root partition are checked from https://gregoryfgwm099531.get-blogging.com/profile