HALO: make a trusted overlay
Change-Id: I009be0361c73ec536277641d235b0c495bc43db6