TPM-backed SSH agent