Bootkeeper: Validating software integrity properties on boot firmware images