[tpm2] tpm2_quote and "safe"