Note that if the attestation instance is running in Isolated mode,
the privateKey and certificate are required. If the attestation instance
is running in AAD mode, they are optional.
Throws
Error when the key in the certificate provided does not match the private key.
Constructs an AttestationToken containing an Attestation Policy document.