tpm2_policycommandcode(1) on Linux
The text 3570763bb8aa, as Debian 12 (Bookworm) shipped it.
Restrict TPM object authorization to specific TPM commands.
Flags it lists
-
--cphash -
--policy -
--session -
-L -
-S