Reducing the Attack Surface for End-of-Support Edge Devices