tpm2_policylocality(1) on Linux
The text be34c117a917, as Debian 13 (Trixie) shipped it.
Restrict TPM object authorization to specific localities.
Flags it lists
-
--cphash -
--policy -
--session -
-L -
-S