Verifying Security in a Safety Context: Airworthiness and DO-326A/356A