Thoughts on Remote Attestation Security