suspend BitLocker before TPM update