Switch to protection domains and implement support for digitally signed bundles. I'll comment on the concerned JIRA issues later (FELIX-21)(FELIX-22).