It seems pretty interesting for groth 16 uses. I guess we might need a neutral 3rd party to run the SGX instances. There is still an issue about how users or anybody can trust the enclave measurements.
I just stumble into similar situation, for which I have create another topic here: Combining SGX and web3 for better security/privacy