title: is it possible to force a(n embedded) JVM to only execute certain digitally signed apps?
body: <p>A bit of a noob-who-tries-to-get-a-glimpse-of-something-without-making-homeworks-first question...</p>
  
  <p>Suppose I'd like to include a JVM on a closed source O.S./hardware to be able to provide extended functionalities to customers with addon java applets, and that I'd want to be the only available source to develop and sell addon apps... then is it feaseable to easily implement such a mechanism by simply forcing embedded JVM to only allow execution of apps signed with my digital sign?</p>
  
  <p>In other words I'd just like to know if this is an easy to implement, already proven to work, widely accepted path or just plain BS (for reasons you are free to not tell!) :)</p>