Securing Power Side Channels by Design