[tpm2] Re: tpm2_certify signature verification