Identifying trusted ROM sources