Equipment of a first network operator of a first mobile communication network, comprising: a radio interface input configured to receive an initial attach procedure request from a first device that is an Internet of Things Device provided with a device identifier; means for obtaining the device identifier or a derivative thereof from the request; means for checking whether the device identifier is assigned to that network and if no, issuing a nack message to the first device, otherwise: for determining an Internet of Things Application Operator associated with the first device; for establishing a cryptographically secured end-to-end communication connection between the first device and equipment of the Internet of Things Application Operator associated with the first device, using application layer security; and for transporting (465, 470) over the secure end-to-end communication connection from the equipment of the Internet of Things Application Operator to the first device provisioning information associated with the first device, which provisioning information configures the first device to be equipped with a programmatic subscription module of the mobile communication network to thereby allow the first device to use a normal network attach procedure of the first mobile communication network using the programmatic subscription module of the mobile communication network and to use normal security features such as encryption of network connection. a radio interface input configured to receive an initial attach procedure request from a first device that is an Internet of Things Device provided with a device identifier; means for obtaining the device identifier or a derivative thereof from the request; means for checking whether the device identifier is assigned to that network and if no, issuing a nack message to the first device, otherwise: for determining an Internet of Things Application Operator associated with the first device; for establishing a cryptographically secured end-to-end communication connection between the first device and equipment of the Internet of Things Application Operator associated with the first device, using application layer security; and for transporting (465, 470) over the secure end-to-end communication connection from the equipment of the Internet of Things Application Operator to the first device provisioning information associated with the first device, which provisioning information configures the first device to be equipped with a programmatic subscription module of the mobile communication network to thereby allow the first device to use a normal network attach procedure of the first mobile communication network using the programmatic subscription module of the mobile communication network and to use normal security features such as encryption of network connection. for determining an Internet of Things Application Operator associated with the first device; for establishing a cryptographically secured end-to-end communication connection between the first device and equipment of the Internet of Things Application Operator associated with the first device, using application layer security; and for transporting (465, 470) over the secure end-to-end communication connection from the equipment of the Internet of Things Application Operator to the first device provisioning information associated with the first device, which provisioning information configures the first device to be equipped with a programmatic subscription module of the mobile communication network to thereby allow the first device to use a normal network attach procedure of the first mobile communication network using the programmatic subscription module of the mobile communication network and to use normal security features such as encryption of network connection.