Securing RAG Pipelines