27.5.17 Boot Read Protection
The boot read protection is enabled by setting the BRPE bit in the BCTRL register. If the BRPE bit is set, the primary boot array is not readable, except the last 32-words (128-bytes), and are execute-only. This means this section is reserved to set the BRPE bit and jump to the main array.
The firmware must set this bit. If the dual-boot protection is enabled, the alternate boot is read-protected (no execute-only area).
When set, only a start-up reset will clear the boot read protection. The software reset command has no effect.