pid1: allowlist all tpm devices for a unit when encrypted creds are needed
    
    We might be configured to use some ther device than /dev/tpmrm0, hence
    allow them all by allowlisting the tpm char device class as a whole.