1. A method performed by a computer system including an open processing domain, a secure processing domain, and a non-transitory storage medium storing instructions that, when executed by the computer system, cause the computer system to perform the method, the method comprising: determining that a secure abstraction layer executing in the secure processing domain of the computer system is trusted based on successfully verifying the presence of a permanent encryption key embedded in a hardware security element associated with the secure processing domain, the secure abstraction layer being configured to interface with secret data protected by the secure processing domain; invoking, by a client application executing in the open processing domain of the computer system, the secure abstraction layer; and performing, by the secure abstraction layer, a secure operation on the secret data based on an invocation from the client application.