Probably requires a hardware-security-module for generating secure attestation keys.