Confidential loading: text section not cleared on tag mismatch

[rubenvdijck]

According to the Sancus paper, an enclave's text section should be cleared when loading confidentially fails due to tag mismatch. However, this does not seem to happen in practice making it vulnerable to attacks.

[jovanbulck]

Thanks @rubenvdijck for reporting! We can check if we can re-use some state-machine logic from the sancus_disable flow which should also clear the SM text section normally..