TPM provider should establish most-secure primitives for itself

[ionut-arm]

Following the RaspberryPi tests, it's quite apparent that not all TPMs support the primitives that we'd want to use by default in, for example, securing our authentication sessions.

Based on work to be done in parallaxsecond/rust-tss-esapi#38 we can pre-select a list of primitives and their parameters, and find the most desirable one that's supported, at runtime.