1. A method comprising: establishing, at the request of a client system, by a security-enabled processor of a computing system, a secure execution environment having a hardware-protected memory area that includes software identified by a client system request, the hardware-protected memory area inaccessible to code that executes outside of the hardware-protected memory area; and providing, to the client system, cryptographic certification that indicates that the secure execution environment is established, in an activation state, to execute only that software identified by the client system request.