The other UX problem is you need to make sure that someone doesn't replace the initial bootstrap OS with something else that captures the master key. So, that'

The other UX problem is you need to make sure that someone doesn't replace the initial bootstrap OS with something else that captures the master key. So, that's where you need the secure cryptographic processor and the trusted environment, etc.