A User-Centric Security Policy Enforcement Framework For Hybrid Mobile Applications