Model-carrying code: a practical approach for safe execution of untrusted applications