main
tpm2: optionally disable TPMA_NV_ORDERLY for NvPCRs
tree-wide: add missing libopenssl_cflags to targets using tpm2-util.h
tree-wide: embed dlopen notes into individual executables
various: attach errno to structured logs, even if not used in msg
tpm2: Improve how NvPCR protection works.