Securing EGL-generated code