Send an HPKE-encrypted prompt to the Aubrai chat agent running inside an attested private enclave. Only the enclave can decrypt your message.