The pieces every attesting transport binding shares (spec §5.6): one key
manager that serves the channel credential, one trust manager that defers
the trust decision to attestation, and one attestation call over a
presented chain. The tls binding uses them today; the dtls binding and the
planned wss binding use them too, so a fix lands in one place.