Comment by 0c3ca83

Graphene doesn't control this, but the only acceptable fix should be to drop remote attestation.

You get the roughly the same security properties by enrolling user-owned pubkeys.