tpm: add TPM2_HierarchyChangeAuth command support