[tpm2] tpm2_nvwrite with policy based authorization