tpm: avoid clang shifting negative signed warning