Turns out TPM wasn't Microsoft being difficult.
These Proxmox optimizations saved me from overheating and catastrophic data loss ...