If you think that's bad, you're not going to like the fact that they're letting the NSA design a system for "TPM-based Network Device Remote Integrity Verification":

https://www.ietf.org/archive/id/draft-ietf-rats-tpm-based-ne...