I'm implementing an application which uses the Secure bootloader with bonds. What happens if I create a bond to a device in application mode and then switch to bootloader mode and an attacker manages to connect first to the device in bootloader mode. Can the attacker by default just create a new bond with the bootloader in the example project? Or can only prebonded devices connect to the DfuTarg?