> keep the bootloader (and key) on a usb drive on your person. So the bios that boots your USB in a hypervisor can't read what you type? Thats what TPM can so

> keep the bootloader (and key) on a usb drive on your person. So the bios that boots your USB in a hypervisor can't read what you type? Thats what TPM can sort of help with.