TPM technically isn't about locking users out, but will be (is) used this way - between enterprise customers and MAFIAA's desire for DRM, it's pretty much a given. It's a tool in the War on General Purpose Computing. Alone not enough to win it, and sure, theoretically useful for both sides, but for the enemies of general purpose computing it's an important cog in their war machine.