@aeodwrath Yes, no issues, also tpm 2.0 as follows;
<os firmware="efi">
<type arch="x86_64" machine="pc-q35-8.1">hvm</type>
<firmware>
<feature enabled="yes" name="enrolled-keys"/>
<feature enabled="yes" name="secure-boot"/>
</firmware>
<loader readonly="yes" secure="yes" type="pflash">/usr/share/qemu/ovmf-x86_64-smm-ms-code.bin</loader>
<tpm model="tpm-crb">
<backend type="emulator" version="2.0"/>
</tpm>