Slalom: Fast, Verifiable and Private Execution of Neural Networks in Trusted Hardware