1. A method comprising: loading, by a computing device, application code of a mobile application; modifying, by the computing device, the application code to wrap the application with an application wrapper that is configured to manage execution of the application based on one or more policy files and configured to intercept one or more functions of the application code, wherein the one or more policy files each define one or more access controls that are enforced by a device management system on one or more user devices; creating, by the computing device, a library file comprising field-programmable business logic defining implementation code linked to one or more of the functions intercepted by the wrapper; and providing, by the computing device, the wrapped application and the library file to at least one user device.