The service binding system is the primary security mechanism for services, when combined with node certificates. Nodes and services may cooperate with some certification program for security or reliability, allowing the service to deploy differently depending on the certification status of the node.
The binding protocol allows major deployment decisions at service binding time. Binding may not necessarily involve the downloading of a simple proxy, but the migration of a major part of the application.