* Memory permissions for .rodata have been fixed, it is now correctly mapped R-- instead of RW-.
* Sealed old keys are now stored in the auxilliary data page (0x1F01FA000) instead of in .rwdata.
* TrustZone code is now cleared from IRAM before signalling to NX_BOOTLOADER that the SecMon is awake.
* A function for getting HardwareType based on fuses now returns 0xF whenever it would previously have returned a non-zero value.
* An 0x10 block in the auxilliary page is now used for intermediate key derivation, instead of a block on the stack. This block is only memcleared once at the end, instead of after every time it is used.
[more details to be filled in later].