TPM2_SA_DECRYPT
if (auth->attrs & TPM2_SA_DECRYPT) {
tpm_buf_append_hmac_session(chip, &buf, TPM2_SA_DECRYPT,