1. A method, comprising: converting at least one computer program executable into a computer program targeted for a computer system, wherein the converting comprises scrambling the at least one computer program executable by applying an encryption scheme to the at least one computer program executable; providing an assured execution environment in which the computer program can be accessed on the computer system, wherein the providing comprises preventing malicious code from executing on the computer system before the environment is loaded on the computer system; and executing the computer program on the computer system only if the computer program complies with a policy, wherein if the computer program does not include metadata from a filesystem of the computer system, denying the execution of the program in accordance with the policy.