A system comprising: one or more processors; memory; an authority service stored in the memory and executable by the one or more processors to: receive a request for an application to access a resource over a network; send, based at least in part on the request, a query to a network component to collect hostname information useable to establish a network connection to access the resource; send, based at least in part on the request, a query to a different network component to collect proxy information useable to establish the network connection with the resource; collect, at a secure operating system component and based on the queries, the proxy and hostname information that enables the application to access the resource over the network connection; create, by the secure operating system component, a ticket that includes the proxy information and the hostname information; securely store the ticket in an operating system component thereby preventing the application from altering the proxy information or the hostname information included in the ticket; use the ticket to validate an intent of the application to access the resource over the network connection; and in response to validating the intent, enforce a network access on the application. one or more processors; memory; an authority service stored in the memory and executable by the one or more processors to: receive a request for an application to access a resource over a network; send, based at least in part on the request, a query to a network component to collect hostname information useable to establish a network connection to access the resource; send, based at least in part on the request, a query to a different network component to collect proxy information useable to establish the network connection with the resource; collect, at a secure operating system component and based on the queries, the proxy and hostname information that enables the application to access the resource over the network connection; create, by the secure operating system component, a ticket that includes the proxy information and the hostname information; securely store the ticket in an operating system component thereby preventing the application from altering the proxy information or the hostname information included in the ticket; use the ticket to validate an intent of the application to access the resource over the network connection; and in response to validating the intent, enforce a network access on the application. receive a request for an application to access a resource over a network; send, based at least in part on the request, a query to a network component to collect hostname information useable to establish a network connection to access the resource; send, based at least in part on the request, a query to a different network component to collect proxy information useable to establish the network connection with the resource; collect, at a secure operating system component and based on the queries, the proxy and hostname information that enables the application to access the resource over the network connection; create, by the secure operating system component, a ticket that includes the proxy information and the hostname information; securely store the ticket in an operating system component thereby preventing the application from altering the proxy information or the hostname information included in the ticket; use the ticket to validate an intent of the application to access the resource over the network connection; and in response to validating the intent, enforce a network access on the application.