meta-phosphor: packagegroup-security: remove tpm2-pkcs11

We don't need pkcs11 support on the BMC by default and it ends up
causing a dependency chain that brings in Rust.

This packagegroup can only be pulled in when meta-security/meta-tpm is
used, so hook into BBFILES_DYNAMIC to use it when appropriate.

Signed-off-by: Patrick Williams <patrick@stwcx.xyz>
Change-Id: Iff12f641e57ace313ad64a402091444edba74ea4
diff --git a/meta-phosphor/conf/layer.conf b/meta-phosphor/conf/layer.conf
index 28d17d5..4600291 100644
--- a/meta-phosphor/conf/layer.conf
+++ b/meta-phosphor/conf/layer.conf
@@ -17,4 +17,6 @@
     aspeed-layer:${LAYERDIR}/dynamic-layers/aspeed-layer/recipes-*/*/*.bbappend \
     nuvoton-layer:${LAYERDIR}/dynamic-layers/nuvoton-layer/recipes-*/*/*.bb \
     nuvoton-layer:${LAYERDIR}/dynamic-layers/nuvoton-layer/recipes-*/*/*.bbappend \
+    tpm-layer:${LAYERDIR}/dynamic-layers/tpm-layer/recipes-*/*/*.bb \
+    tpm-layer:${LAYERDIR}/dynamic-layers/tpm-layer/recipes-*/*/*.bbappend \
 "
diff --git a/meta-phosphor/dynamic-layers/tpm-layer/recipes-core/packagegroups/packagegroup-security-tpm2.bbappend b/meta-phosphor/dynamic-layers/tpm-layer/recipes-core/packagegroups/packagegroup-security-tpm2.bbappend
new file mode 100644
index 0000000..06774b7
--- /dev/null
+++ b/meta-phosphor/dynamic-layers/tpm-layer/recipes-core/packagegroups/packagegroup-security-tpm2.bbappend
@@ -0,0 +1,3 @@
+# We don't need pkcs11 support on the BMC by default and it ends up causing a
+# dependency chain that brings in Rust.
+RDEPENDS:packagegroup-security-tpm2:remove = "tpm2-pkcs11"