tpm2_policylocality(1) on Linux
The text d414f043efce, as Debian 11 (Bullseye) shipped it.
Restrict TPM object authorization to specific localities.
Flags it lists
-
--policy -
--session -
-L -
-S