This is a follow up work on the SPEC-3394
SPEC-3394 Add a hook in the policy framework to restrict access to agl_shell_desktop