1. A method for securing program code for an electronic control unit, comprising: transmitting an order for the program code to a developer, the order including specifications and an authentication key; receiving the program code and the authentication certification from the developer; verifying the authentication certificate to determine whether the developer was an authorized source of the program code; generating metadata identifying the authorized source of the program code; and embedding the metadata in the program code.