Implement the security checks and clean-up the left-overs. Now we are free to start switching to protection domains. Then we need to get signed bundles working. (FELIX-21)