SEC. 9.1 CORBA 525
The interceptor first reads the policy information from the client’ s associated policy objects, and passes this information to the vault object. Clearly, the vault object must be implemented as part of the ORB in a tamper-proof way and belongs to the trusted computing base of any CORBA system.