TitanCFI: Toward Enforcing Control-Flow Integrity in the Root-of-Trust