App installation restrictions and app governance approach