SecretVM lets you verify what code runs without exposing what that code does.