Google Cloud's PQC roadmap mostly just puts dates on the usual hybrid-KEM, KMS, certs, and HSM slog.

What can go wrong when Nitro Enclaves talk to KMS? Apparently attestation, policy, and sdk-c, all at once.