[tpm2] does "unique-data" really work?