tpm2_policycommandcode(1) on Linux

The text d808945fd8e3, as Debian 11 (Bullseye) shipped it.

Restrict TPM object authorization to specific TPM commands.

Flags it lists