Fix Bazel on properly sandboxed execution

Test Plan: Tested by launching VM

X-Origin-Diff: phab/D199
GitOrigin-RevId: d27f09e62067082ca0d6f40510c851752094b481
diff --git a/BUILD b/BUILD
index 555b968..0057b1f 100644
--- a/BUILD
+++ b/BUILD
@@ -23,6 +23,7 @@
     outs = [
         "tpm/tpm2-00.permall",
     ],
+    tags = ["local"],
     cmd = """
     mkdir tpm