1. A method comprising: executing, by a mobile computing device, a secure operating environment on the mobile computing device, wherein the secure operating environment executes on the mobile computing device independently of a host operating environment of the mobile computing device; receiving, by the secure operating environment, a request for a security service, the request received from an application executing in the secure operating environment; determining, by the secure operating environment, a security capability of the mobile computing device to provide the security service, wherein the security capability of the mobile device includes a security capability provided by the host operating environment; determining, by the secure operating environment, a security capability of the secure operating environment to provide the security service; selecting, by the secure operating environment, a security capability to provide the security service, wherein the security capability is selected from one or both of the security capability of the mobile computing device or the security capability of the secure operating environment; and providing, by the secure operating environment, the security service to the application, wherein the security service is provided based on the selected security capability.