Hardening ROS via Hardware-assisted Trusted Execution Environment