I think Maple additionally encrypts the data sent to their server using a pubkey owned by the CC hardware, we'll have to add that to the routstr spec. Also, verifying the attestations that Maple does would also need to be a part of the spec I think