Stateful JWT tokens are functionally the same as session cookies, but without the fight-analyzed and effectively-reviewed implementations or customer guidance. In Intel SGX, the interface instructions are termed ocalls and ecalls. through an ocall/ecall all arguments are copied to trusted/untrusted