I don't like the whole "remote attestation". While some time ago, I thought the "encrypted" VMs are the future, now I think this is a goose chase. I think people should rely on hardware isolation, on hardware which they simply own.