vtz : virtualizing arm trustzone .
seL4: formal verification of an OS kernel