It seems like the H100 gpu itself has some kind of secure execution environment built in. Not sure of the details but it appears that all data going to and from the gpu will be encrypted.

https://developer.nvidia.com/blog/confidential-computing-on-...