Best approach to control browsers, VMs and Android emulators with AppLocker (without breaking normal software usage)?