A method, operational at a device, comprising: sending a request for authorization to activate a first set of selectively activated features at the device, wherein the first set of selectively activated features refer to activated circuits, activated services, and/or activated functions of the device; obtaining a proof of authority for the device to use the first set of selectively activated features at the device, signed by a first authorization server and activating the first set of selectively activated features; sending a request to use a network service to a network node, wherein the first set of selectively activated features includes first selectively activated features needed by the device to use the network service; obtaining, from the network node, in response to sending the request to use the network service, a request for the proof of authority for the device; sending, to the network node, the proof of authority for the device; sending, to the network node, a request for a proof of authority for the network node to provide the network service; obtaining, from the network node, the proof of authority for the network node to use a second set of selectively activated features at the network node, signed by a second authorization server, wherein the second set of selectively activated features includes second selectively activated features needed by the network node to provide the network service and needed by the device to use the network service, wherein the second set of selectively activated features is a subset of the first set of selectively activated features; and validating the proof of authority for the network node before using the network service. sending a request for authorization to activate a first set of selectively activated features at the device, wherein the first set of selectively activated features refer to activated circuits, activated services, and/or activated functions of the device; obtaining a proof of authority for the device to use the first set of selectively activated features at the device, signed by a first authorization server and activating the first set of selectively activated features; sending a request to use a network service to a network node, wherein the first set of selectively activated features includes first selectively activated features needed by the device to use the network service; obtaining, from the network node, in response to sending the request to use the network service, a request for the proof of authority for the device; sending, to the network node, the proof of authority for the device; sending, to the network node, a request for a proof of authority for the network node to provide the network service; obtaining, from the network node, the proof of authority for the network node to use a second set of selectively activated features at the network node, signed by a second authorization server, wherein the second set of selectively activated features includes second selectively activated features needed by the network node to provide the network service and needed by the device to use the network service, wherein the second set of selectively activated features is a subset of the first set of selectively activated features; and validating the proof of authority for the network node before using the network service.