Add support for remove volume key sealing (TPM) to the standard systemd tools (systemd-cryptenroll, systemd-cryptsetup)

Goal: 

• Make it possible to perform remove volume key sealing against target TPM and the expected PCR values with standard systemd tools (systemd-cryptenroll, systemd-cryptsetup)

The following upstream pull requests to systemd implement the idea:

• https://github.com/systemd/systemd/pull/26027
• https://github.com/systemd/systemd/pull/24597

Note, Azure Confidential VM Tech Preview uses a different proof-of-concept solution where remotely sealed credentials are 'imported' before first use. The relevant code can be found here: https://gitlab.com/vkuznets/tpm2-luks-import/ The encryption part is available here: https://gitlab.com/vkuznets/encrypt-rhel-image 

Acceptance Criteria

TBC