Secure Boot
This section of the product wiki contains a guide to enable secure boot. Enabling secure boot involves flashing keys to the hardware, then the hardware will only be able to boot images signed with those keys. This is an irreversible process that establishes root of trust.