1. A method of having a device in a communication system update an operational policy for the device, the method comprising: encoding a policy update in a virtual machine language used by a virtual machine on the device; having the policy update signed by a trusted entity; and sending a message comprising the signed policy update to the device to enable the device to implement the policy update using the virtual machine on the device.