as a follow-up to https://github.com/confidential-containers/confidential-containers/pull/139#discussion_r1273529835