1. A method for a node's authority to download new code into an existing node within a device, said method comprising: said authority preparing a command message including the new code, load predicates and trust parameters, where the load predicates specify whether a current environment in said device is a secure environment for said code; said authority communicating said command message to the device; said device receiving said message; said device verifying that said message originated from said authority, and verifying that the current environment is valid for said load predicates; and downloading said code if said message is verified to have originated from said authority, and said current execution environment is valid for said load predicates.