tianweiz: attestation_kernel on the client side