What's up with vboot? Do we need it? Can we enable it? Does it only work with TPM or can be used on any machine ?