Building a More Assured Hardware Security Module