Secure Box Signing/Authentication

Having the ability to authenticate a box before loading it seems like the first logical step towards dynamically loaded boxes and remote updating of individual boxes.

Why should we be forced to re-link and restart every time we want to change some code?

The issue names no file, test, or entry point. Begin by locating the box-loading path and understanding how boxes are currently authenticated, then determine the requirements for authenticating a box before loading. Done would require an agreed design for secure dynamic loading and remote updates.

Written by the indexing model from the issue text.