You can do this with e.g. EC2 enclaves. Of course that's kind of begging the question, since you need to trust the enclaves.