Comment by pclmulqdq

Why wouldn't you have your enclave carry a certificate instead of doing this?

You may eventually need to rotate its identity key, and if you want to do that, you need a certificate system.