Note that the behavior changed as a result of https://crrev.com/c/437592. So, pre-M58 recovery images behave differently and leave logs in this case.

Now we attempt to lock the tpm first thing during recovery boot (for good reasons), before even frecon and the logs are set up. Thus, if it fails, we get no logs/console messages.

TPM lockouts (that temporarily lead to lock_tpm failures) do happen in practice occasionally, so having some output in such cases is useful for diagnostics.