FIDO2-first immutable OS -- HSM/U2F as the root of trust for Secure Boot, disk encryption, SSH...