tpm2-common: process and reject RSA parent flag

Since EC keys are much easier and faster for TPMs to generate, we
don't want to encourage anyone to generate RSA parent keys.  However,
the processor should understand the flag and error out if it is seen.

Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>