Securing Bootloader in Pixhawk

The bootloader can be reset by non trusted sources. I’m trying to find a way so that only trusted sources may update the bootloader. Is there any hardware or software solution to this problem?