[tpm2] Clearing TPM

I am working a Linux IoT integration with TPM 2.0 and want to write a provisioning script for ensuring the TPM is setup consistently on the device.  The script uses tpm2_clear and tpm2_changeauth.  Some of my devices show the following error message when calling tpm2_clear:

dhub(a)dhub336:~$ sudo tpm2_clear
[sudo] password for dhub:
WARNING:esys:src/tss2-esys/api/Esys_Clear.c:291:Esys_Clear_Finish() Received TPM Error
ERROR:esys:src/tss2-esys/api/Esys_Clear.c:97:Esys_Clear() Esys Finish ErrorCode (0x00000921)
ERROR: Esys_Clear(0x921) - tpm:warn(2.0): authorizations for objects subject to DA protection are not allowed at this time because the TPM is in DA lockout mode
ERROR: Unable to run tpm2_clear

This makes me nervous as some of the devices need to be provisioned in the field.  Why is the DA lockout preventing me from clearing the TPM?  This is occurring on a NUC10 where the TPM is implemented in the PTT.

Thanks,
Dan Burns