* protect from out of bounds writes
* protect from stack growing into program memory region
* provide waf options to enable

Change-Id: I1629f3e9ce600a494fe8cf8441f67e23449c4629