Moving from armored software to verified TPM