It could be that the client device validates a checksum against the approved list at the store before installing? Haven&#x27;t tested if this is the case, just spitballing a mechanism that would allow for the control without the hosting.