Enforcing low-cost security for ARM