{ ... }: {
  security.tpm2.enable = true;
  security.tpm2.abrmd.enable = true;
}