1. A method for maintaining the security of a secured execution environment on a system comprising said secured execution environment and a second execution environment, comprising: maintaining a current state for said secured execution environment selected from among a group of possible states comprising: a standard input mode state and a nexus input mode state; directing a flow of user input according to said current state at least through a secure kernel of both said second environment and said secured execution environment.