Securing Bare Metal Hardware at Scale