trusted execution environments shepherd