Can Security Frameworks Handle Self-Directed Software?