How TPMs Work and Why We Added Support in Bottlerocket