policy: Add a new policy hook for deactivating apps