Gems/packages should explicitly declare what kind of features they need/want (file, net, deserialization, execute)

And when the sig. changes, you should get a warning

Very similar to the iOS entitlements