1. A method of facilitating secure operation of an integrated system having multiple levels of software, said method comprising: authenticating, by a current level of software, a next level of software of the multiple levels of software before passing control of the integrated system to the next level of software; and limiting ability of the next level of software to modify an operational characteristic of the integrated system, said limiting being implemented at a data access control function of the integrated system.