You deploy a mobile messaging solution with Microsoft Exchange Server 2003 Service Pack 2.  
When the application is running， it must not be able to access protected registry keys.  
You need to ensure that the application meets the outlined requirement.
What are two possible ways to achieve this goal？（）

You deploy a mobile messaging solution by using front-end and back-end servers that run Microsoft Exchange Server 2003 Service Pack 2. Certificates are installed on all Microsoft Windows Mobilebased devices.  
You need to allow devices that run Microsoft Windows Mobile 5.0 to perform certificate-based authentication for Microsoft Exchange ActiveSync.  
What should you do？（）