I use Qubes with TPM and Heads and with a hardware key. All based on FLOSS, so its possible.