1. A system comprising: means for digitally signing a load module using a first key to yield a first digital signature; means for digitally signing the load module using a second key to yield a second digital signature; means for distributing at least the first digital signature to a first remote electronic appliance comprising a first protected processing environment operable to authenticate the first digital signature before the first remote electronic appliance executes the load module; and means for distributing at least the second digital signature to a second remote electronic appliance comprising a second protected processing environment operable to authenticate the second digital signature before the second remote electronic appliance executes the load module.