For example, some values
which are generated remotely have no known “good” values that
the customer can check against (e.g. a remote VM generates a
fresh key), i.e. there is no expected value to check against. Also,
the self-consistency check may not catch this if a keyed hash is not
used (most likely by design mistake). Hence tainting is needed.