Formally Verified Security @ MPI-SP