enclave { trusted { }; untrusted { /* define OCALLs here. */ }; };