When the keyslot is unsealed, the entropy used to derive the private key is revealed, allowing to verify that the key was generated randomly as specified.