evm: prohibit userspace writing 'security.evm' HMAC value