Our implementation of BEEP requires changes in browsers to support security hooks, and changes in web applications to embed policies as hooks in web pages. We successfully modified several browsers and web applications and found the changes to be small and straightforward, presenting little barrier to adoption. Code for our browser modifications, benchmarks, and test cases is available online