1. A method for supporting download of a executable program to an end-user using a network infrastructure element, comprising: in response to detecting an end-user platform seeking to download an executable program, at a network infrastructure element, performing: determining, by the infrastructure element, that the end-user platform seeks to download the executable program; receiving by the infrastructure element, information regarding policies associated with the end-user platform, the policies regarding acceptable behavior for operation of the executable program on the end-user platform; executing by the infrastructure element, the executable program to monitor operating system call-based behavior of the executable program when the executable program makes calls to an operating system running on the network infrastructure element, the operating system call-based behavior forming a corresponding model of the executable program; wherein the model formed from the operating system call-based behavior reflects the policies associated with the end-user platform regarding acceptable operation of the executable program when the executable program would be executing within the end-user platform; using by the infrastructure element, the model of the executable program to vet the operating system call-based behavior of the executable program with respect to the policies corresponding to the end-user platform to determine if the executable program will operate within the acceptable behavior if downloaded and executed on the end-user platform; and if the vetting of the executable program is acceptable with respect to the policies, permitting by the infrastructure element, the end-user platform to download the executable program.