1. A method, comprising: encapsulating resources in a software container; establishing a DMZ to control access to the resources; executing an application; receiving from the application a request for one of the resources; providing the resource in response to the request if access is granted to the application at the DMZ.