When the keyslot is unsealed, the entropy used to compute the private key is revealed, allowing to verify that the key was generated randomly as specified.