SECURE ROLLBACK OF SOFTWARE FAULT ISOLATION DOMAINS