bakery framework for crypto/seal of on-site-server w/ tpm