1. What does the owner Epoch and CPUSVN in the table mean? If they are machine-specific, how does SGX ensure that the same Enclave uses the same seal key on different machines?
2. Should KEYREQUEST be kept secret? If the attacker gets KEYREQUEST, how does SGX ensure that the seal key is not exposed? Is SGX secure by hiding key export functions in hardware?