[tpm2] unsealing and evictcontrol issues