Trading a Cloud Identity for Your Own: Workload Attestation on Managed Compute