Is it possible to lock down a machine and only allow applications to be delivered from the nal?