Define an NV slot that requires owner password for writing and deletion

[Melab]

It has been said before in issue #3341 that requiring a password to delete an NV slot requires using a policy. This policy could be used to reference a specific password, but how do we make it so that it is the owner password without actually specifying the owner password? In other words, if I change the owner password, I should be able to use that new owner password to delete the NV slot.

[AndreasFuchsTPM]

In don't understand?
TPM2_NV_Undefine always requires the Owner password and it is always the password at time of calling Undefine.
So what you are describing is the default flow on the TPM.