The thing I don't like about the Secure Enclave is that it does not yet support ed25519 keys.