TMS320F28374S: How to protect DCSM from leaks when programming the chip for the first time?

Using DCSM function of 28374S. All functions are normal.

But consider the factory's first programming chip problem: it was discovered that the generated HEX and bin files and.out contained secret keys. So it's not safe to provide these documents to the factory.

Any good ideas?