If your device has been out of your site, under the control of a well-funded government agency, and you believe that agency to be hostile then the device is compromised and the only thin you can do with it is sell it on to someone else or destroy it.