It looks like Hyper-V can supply TPM without encrypting the disk?
Why not just encrypt the VMX file or create some silly encrypted file for TPM?
