Ostendio: Always-on, Always Secure