Interface EnclaveTrustAnchors

Fleet-pinned KMS root and allowed dstack application IDs.