I'm very glad to see this.
It's unclear to me what actually the secure enclave thing actually buys me as a user. I don't know if the intent is to say "the host cannot see your job at all" but I kind of doubt that's the presumption/model. I'm not really sure what it actually provides?