Returns the decryption key for an image from a new database
column.

Requires TPM client authentication, and requires that the node
be in the correct (currently hardcoded) state, which requires
a TPM quote to get into.