Using Formal For RISC-V Security