When upgrading, you have to remove old PCR states, so rolling back to an older version is detected.