Safe and Practical GPU Acceleration in TrustZone