Locking Down Applications in a VDI and Session-Based Virtualization World