retired: this is work to add a TPM admission controller to Kubernetes; can be upstreamed in the future - View it on GitHub