How to make attestation key persistent and get application key pem for pkcs11?

I need to add generated attestation key/application key into tpm2-pkcs11. It supports tss2 pem format like this:

```
-----BEGIN TSS2 PRIVATE KEY-----
...
-----END TSS2 PRIVATE KEY-----
```

Also AK should be in persistent handle.
How could I add attestation key (generated with tpm.NewAK(...)) into persistent handle and get TSS2 pem from attested application key (generated with tpm.NewKey(...))?

Start with the tpm.NewAK(...) and tpm.NewKey(...) entry points, then compare their outputs with the tpm2-pkcs11 requirements for a persistent attestation-key handle and TSS2 PEM application-key data. Done means documenting a supported procedure, or clearly identifying the missing functionality, for both operations.

Written by the indexing model from the issue text.