Function find_trusted_binary 

pub fn find_trusted_binary(binary_name: &str, app_name: &str) -> Option<PathBuf>

Convenience wrapper: discover binary_name using the current process’s environment. Every enclaveapp consumer should prefer this over PATH lookups — an attacker who controls the user’s PATH should not be able to redirect enclaveapp’s launch of its own daemons.