important wrapping shields the non-public HPKE essential in transit and makes sure that only attested VMs that fulfill the key release policy can unwrap the non-public key. Confidential Computing shields data in use https://charlieabtd009641.tinyblogging.com/the-5-second-trick-for-confidential-ai-74077679