For the literally dozen of people who care about the intersection of TPM remote attestation, kexec, Windows, and Bitlocker: LinuxBoot can receive the BitLocker key from the remote attestation server, which is passed to the kexec'ed Windows boot loader via a UEFI ramdisk, so there is no clear-text on the disk, not even an EFI System Partition.
The STABILO Point 88 fineliner (0,4mm) is the best cyan I've found so far for anaglyph 3D #plottertoot
The LED has been desoldered from the board, so that is one fewer blue light to keep us up at night. It is really surprising how much light is produced by such a tiny component.