Prevent users from installing their own launch agents or launch daemons and instead require them to be pushed out by group policy.