Maintain a 'whitelist' of allowed programs

All software running on the machines needs to be authorised (application whitelisting).