Sure if you’re using something that can do remote attestation you know the other TEE is running the same software and you can copy it. Tho I guess maybe replay is an issue?

I don't quite get what your suggestion was.

export the keys... how / why?