TPM-protected client keys

[Thomas Habets]

Since OpenSSH has PKCS11 support nowadays that means it should work
with a TPM chip, right?

Has anyone done it and would like to share instructions for setting it up?

Something like this but for SSH:
http://blog.habets.pp.se/2012/02/TPM-backed-SSL

--
typedef struct me_s {
 char name[]      = { "Thomas Habets" };
 char email[]     = { "thomas at habets.pp.se" };
 char kernel[]    = { "Linux" };
 char *pgpKey[]   = { "http://www.habets.pp.se/pubkey.txt" };
 char pgp[] = { "A8A3 D1DD 4AE0 8467 7FDE  0945 286A E90A AD48 E854" };
 char coolcmd[]   = { "echo '. ./_&. ./_'>_;. ./_" };
} me_t;