Confidential computing’s core trust mechanism is broken. The fix may not exist