---
virtualization_tpm2_enabled: >-
  {{
    (partitioning_luks_enabled | bool)
    and (partitioning_luks_auto_decrypt | bool)
    and (
      (partitioning_luks_auto_decrypt_method | lower)
      == 'tpm2'
    )
  }}