Enforcing Minimal Runtime with Build-TimeProfiling and Hardened Init