1. A computer node, comprising: a software system resource within a trusted enclave; and a software system process outside the trusted enclave, wherein access of the process to the resource is conditioned at least in part on a policy operative within the trusted enclave.