>How do you do this on a proprietary device from the late 90s that runs a WindRiver VXWorks RTOS with 1 MB of SRAM?

You dont and you are not supposed to bend security posture backwards to accomodate insecure devices that should be in the landfill by now