Clarify the role of TF-M secure bootloader (BL1 or BL2) in the boot chain and clarify the requirements of immutability and authentication according to the role.