I don't know about SGX but worked on HDCP and maybe the license charge is for the same reason: lazy or malicious partners could leak a key and compromise the whole system. All the charges pay into the fund to pay damages to the injured if the system suddenly collapses like DVD encryption did.