... call lockdown. In the lockdown world, your TPM comes with a set of signing keys it trusts, ...
... it's not signing up on by you joining the one will contain ...