technically we could also verify the server code given that it supposedly running in enclaves