[TF-A] Measured boot and external TPM modules