Right. The password verification would not be tied to the PCR states, or it wouldn't solve the problem at hand.