1. A chip, comprising: an unsecure module corresponding to a first portion of the chip, wherein the unsecure module is configured to control unsecure firmware to process a command on data flowing in a datapath, wherein the unsecure module processes commands from untrusted sources and trusted sources; and a secure module corresponding to a second portion of the chip, wherein the secure module is configured to: determine if a command is from a trusted source; when the command is from a trusted source, control secure firmware to further process the data flowing in the datapath; and when the command is from an untrusted source, control the secure firmware to not process the data flowing in the datapath.