Nitro enclaves are not a replacement for HSMs and they settled on Ledger Nanos for signing..