1. A method of remotely configuring a point-of-sale peripheral, the point-of-sale peripheral being configured with resident executable program code, the resident executable program code imposing a security requirement prohibiting unauthorized change of the resident executable program code, the method comprising: the resident executable program code receiving a signed executable program code update, validating a source of the signed executable program code update, and updating the resident executable program code with the signed executable program code update, the updated resident executable program code defining an operational framework of at least one allowed mode of operation for the point-of-sale peripheral; the updated resident executable program code transmitting a credential to a token interfaced with the point-of-sale peripheral and, in response to the token confirming that the credential matches a datum stored on the token, the point-of-sale peripheral receiving from the token a cryptographic key stored on the token; the updated resident executable program code generating a framework update request, digitally signing the framework update request with the cryptographic key, and transmitting the signed framework update request to a network gateway via a first network, the framework update request including the credential; the network gateway transmitting the signed framework update request to a network device via a second network distinct from the first network, and receiving from the network device via the second network a confirmation that the signed framework update request was digitally signed with a cryptographic key that the network device had associated with the credential and with the token prior to the network gateway receiving the signed framework update request; the network gateway transmitting to the point-of-sale peripheral via the first network an unsigned framework update payload in response to the framework update request; and the updated resident executable program code installing the unsigned framework update payload into the point-of-sale peripheral; wherein the updated resident executable program code together with the unsigned framework update payload define an updated version of the operational framework, the updated version of the operational framework maintaining the imposed security requirement.