bootloader: wait for flash operation to finish
+ group confidential data in one place + zero all SRAM where needed