Confidential Compute on untrusted OS