What is the plan to support to verify SEV(-ES) attestation report using PEK?

[tylerfanelli]

enarx-archive/sev#100

From @haosanzi - "User can get sev attestation report signed by PEK by QMP interface "query-sev-attestation-report" in the host.
It is reasonable to add a report verification process."

Hi, we've moved the enarx/sev repository over to this domain and are currently working upstream. I've been investigating query-sev-attestation-report in QEMU, and haven't found much use of querying an attestation report over simply using LAUNCH_MEASURE, what are the advantages of getting a PEK in regards of SEV-ES?