Epic's remote-attestation plan for Linux is actually a cunning plot to produce a market for USB TPM dongles that can be reset at runtime and programmed with arbitrary PCR values