Thanks for the suggestion. I've set up a blacklist and applied dynamic security policy tags, but it seems I'm still able to open them. The blacklist, that I can see, only shows if they're in violation of the policy, not actually blocking the app. I'm brand new to Systems Manager (literally today) and it's a bit hard to navigate and understand the settings, so I may be doing it wrong.
