1. A method in a computing device, comprising: installing an application in the computing device; receiving an application manifest associated with the application, the application manifest indicating one or more file types that the application is allowed to access; and registering the one or more file types in a location accessible by a broker service, the broker service being configured to limit access by the application to files of the registered one or more file types.