spec:
  provider:
    tpm:
      tcti: "device:/dev/tpmrm0"
      handle: 0x81000018
  algo:
    RSA:
      bits: 2048
  capabilities:
    - decrypt
  auth: 123