A subsystem to restrict programs into a “reduced feature operating model”