Currently the TDX prover generates a new private key each time it's restarted. There should be a way to choose a fixed one or to store it somewhere