How did the breaker not trip on that? It had one job

Not quite the same thing, but there’s a project that lets you use TPM to protect your host keys: https://github.com/Foxboron/ssh-tpm-agent

[edit: its primary function is to work with clients but buried in the readme it also explains how to use it for host keys]