Post #1945628

@wamserma @Euler that's right. In our case, the recovered public key's digest is included in the attestation report. While the launch digest can change on migration, the digest is guaranteed to persist.