feat req: write tpm 1.2 module with agenix-esque behavior for encrypting secrets to blades

[kurisufriend]

need to enable some kernel mods

[kurisufriend]

probably the keys on-pendrive should be encrypted, decrypted over ssh or ipmi on the live mostly-trusted machines.

[mikhail729]

They have TPM 1.2 though