> You could for example, on every chip put in essentially a public private key pair, which authenticates it and allows it to work

intel SGX already involves a per-chip keypair with intel as the root of trust. it just isn't required to use the rest of the chip