policy: Add a new policy hook for deactivating apps

No match.