meta-phosphor: packagegroup-security: remove tpm2-pkcs11

We don't need pkcs11 support on the BMC by default and it ends up
causing a dependency chain that brings in Rust.

This packagegroup can only be pulled in when meta-security/meta-tpm is
used, so hook into BBFILES_DYNAMIC to use it when appropriate.

Signed-off-by: Patrick Williams <patrick@stwcx.xyz>
Change-Id: Iff12f641e57ace313ad64a402091444edba74ea4
diff --git a/meta-phosphor/dynamic-layers/tpm-layer/recipes-core/packagegroups/packagegroup-security-tpm2.bbappend b/meta-phosphor/dynamic-layers/tpm-layer/recipes-core/packagegroups/packagegroup-security-tpm2.bbappend
new file mode 100644
index 0000000..06774b7
--- /dev/null
+++ b/meta-phosphor/dynamic-layers/tpm-layer/recipes-core/packagegroups/packagegroup-security-tpm2.bbappend
@@ -0,0 +1,3 @@
+# We don't need pkcs11 support on the BMC by default and it ends up causing a
+# dependency chain that brings in Rust.
+RDEPENDS:packagegroup-security-tpm2:remove = "tpm2-pkcs11"