You can condition IAM on Nitro attestation, so that's doable (if a lot more work...

		noctune 6 months ago \| parent \| context \| favorite \| on: One Token to rule them all – Obtaining Global Admi... You can condition IAM on Nitro attestation, so that's doable (if a lot more work than usual).