1. A method of controlling access to execution resources comprising: receiving a request to execute an instruction in a pre-boot environment; determining an identity of the instruction; determining if an access control list includes an entry corresponding to the instruction; and selectively allowing the execution of the instruction if the access control list includes an entry corresponding to the instruction.