The cloud provider can just shut the mint down tho, no? While the cloud provider does not see what’s being run inside the TEE, it can still figure out it’s a mint via public endpoints, DNS records, … Am I missing sth here or does the question boil down to reducing ruggability while adding censorship possibility?