It's all about who has the power over the keys. 1. If the user can supply private keys that are treated as first class citizens, then yay! 2. If the user can'

It's all about who has the power over the keys. 1. If the user can supply private keys that are treated as first class citizens, then yay! 2. If the user can't supply private keys, or the user's private key is treated as a second class citizen, then boo. Given who is driving TPM usage right now (ie: Microsoft), my intuition says situation 2 is far more likely. I'm continually surprised by the number of people who think this is an unreasonable and/or paranoid.