Extending the Java Virtual Machine to Enforce Fine-Grained Security Policies in Mobile Devices