Servers are locked down these days too, are they not? They may have an encrypted boot image, with keys in TPM, and boot from a PXE provisioning system. Would this offer a path to modify that boot image?