make ALLOWPULL=1
to allow pulling dependent containers from Docker Hub
Attestation of public keys to authenticate Keyfork shard requests
Generate ephemeral keys using TPM2 API, have operators perform attestation when they generate the QR code to use for airgap machine.
NOTE: attested ephemeral key replay attacks are not a…