1. A method of controlling access by code to one or more application programming interfaces (APIs) of a device, the method comprising: determining whether the code is signed with an authentic digital signature indicating authorization for the code to access one or more specific APIs of the device, wherein the authentic digital signature is generated by a code signing authority that issues authentic digital signatures external to the device; and controlling access by the code to the one or more specific APIs depending on whether the code is signed with the authentic digital signature.