If we rely on a service for verification we might as well do contact lookup via the purple api

I think signal did something with sgx? Could have swore they solved this problem.