As far as i can see, there is no such description about how to iterate with secured ROS 2 system via ros2cli.
If the ROS 2 application uses security enclaves, ros2cli commands should not rely on the ros2 daemon, because it cannot see any discovery or endpoints without security enclaves. besides, it needs to override the certificates, permission and encryption key setting via ROS_SECURITY_ENCLAVE_OVERRIDE environment variable, otherwise ros2cli cannot see any endpoints at all.

this could be confusion for user when they use secured ROS 2 communication. it would be nice to add description how to use ros2cli for the secured ROS 2 system and application in the section around https://docs.ros.org/en/rolling/Tutorials/Advanced/Security/Introducing-ros2-security.html

Reference: https://github.com/ros2/sros2/blob/rolling/SROS2_Linux.md