tpm2_changeeps(1) on Linux

The text 9d0080b7dc67, as Debian 11 (Bullseye) shipped it.

Replaces the active endorsement primary seed with a new one generated off the TPM2 RNG.