The agent currently only persists the TpmsContext of the AK to disk and not the NK and mTLS certificate.
This means that restarting the agent (not the whole system) mid attestation will cause an unnecessary failure.
The following things are required to fix this: