Pinned loads: taming speculative loads in secure processors