How Can You Trust an Untrusted Environment?