Software restriction policy