A Mechanism for Secure, Fine-Grained Dynamic Provisioning of Applications on Small Devices