Maybe the I/O pattern could be hideable using confidential computing, like with a Nitro Enclave.