How's that work? Are you unlocking, say, a rootfs on boot or something entirely different? I'm curious about the use case and the method.