"In this instance, one of the policies 118(p) may control which application modules 108(a) are permitted to be executed on the computing device 104." . . . .