1. A computer-implemented method, comprising: associating at least one application programming interface (API) with a resource controlled by an operating system, the at least one API including executable instructions to access the resource, the at least one API associated with at least one of a plurality of trust levels, the at least one of the plurality of trust levels indicative of a security level of the resource; associating at least one of a plurality of privilege levels with an application, a privilege level indicative of a trust level needed to access a resource; requesting access to a first resource; and invoking an API object that provides access to the first resource in an isolation execution environment when the application is associated with a first privilege level and the trust level of the at least one API allows access to the first resource to applications with any privilege level.