Sites could require remote attestation via a new API just like some sites (Netflix, etc) require DRM to play content.