Confused about the Trusted Path Execution (TPE) options