That's how SGX probably should work and that's how everyone thought it works for years, but at the last minute Intel announced that they have to sign every enclave. https://software.intel.com/en-us/articles/intel-software-gua...