Attestation-Gated Key Release for Confidential Computing Workloads

Using TEEs to bind key release to specific workload code rather than relying on the kubernetes control plane