How could TPM password prevent USB booting or coreboot being overwritten? I think the TPM can only be used to measure boot metrics and detect tempering and and an admin password is just used to remeasure the boot metrics?
The script you provided for hibernation is very handy. Thank you!