Even if the data is signed by a key in the secure enclave of the source?