9 points by sjamaan
That's cool, but why not do it with the TPM?
One reason could be that some cloud providers (Hetzner for example) don't offer TPM or vTPM for their VPS :(.
If the entire machine is taken that doesn't really help much, at least not without an additional PIN or so.