Made something similar at work a bunch of years back…. :) good to see people still thinking of this stuff and making modern versions

That being said what may be more useful is a EFI binary you can push to a motherboard that does this with a tpm key