in the course of boot, a PCR in the vTPM is extended While using the root of this Merkle tree, and later on verified by the KMS prior to releasing the HPKE non-public key. All subsequent reads with the root partition https://no-ransom-6dmd.vercel.app/