A non-transitory computer-readable storage medium comprising instructions, which when executed by a processor of a computing device, cause the processor to perform acts of a method of controlling system settings of the computing device, wherein the method comprises:
- determining configuration data associated with a software application, wherein the configuration data identifies one or more new system settings to be temporarily enforced on the computing device during an execution of the software application, and wherein the configuration data is digitally signed;
- and
- in response to an initiation of the execution of the software application, determining if the one or more new system settings are more restrictive than corresponding original system settings;
- wherein, if the original system settings are more restrictive than the one or more new system settings, maintaining the original system settings, and if the original system settings are less restrictive than the one or more new system settings, reconfiguring system settings on the computing device;
- wherein the reconfiguring comprises verifying at least one digital signature associated with the digitally signed configuration data;
- wherein if the at least one digital signature associated with the digitally signed configuration data successfully verifies, then the reconfiguring further comprises temporarily enforcing new system settings for the duration of the execution of the software application and upon termination of the application restoring the system settings on the computing device to the corresponding original system settings.