Strict Application Execution Control with Hierarchical Group Management Using Digital Certificates on Educational Windows PCs