1. A method comprising the steps of: receiving a load module and an associated specification; verifying that the load module performs as specified by the specification; determining that the load module does not include harmful functionality; and conditionally digitally signing the load module based at least in part on results of the verifying and determining steps.