requireCryptographicHolderBindingOrDefault