1. In a computing environment, a methodology comprising: evaluating a set of code to determine whether the code is security critical code, and if so, identifying the set of code as security critical; and evaluating the set of code to determine whether the code is safe with respect to being called by untrusted code, and if so, identifying the set of code as treat as safe.