can't we use remote attestation to verify the software on the device is the promised software?