Add a policy to prevent access to the Play Store from unmanaged accounts on managed devices.

This is required for allowing ARC++ fully trusted status within Google. We will probably not surface this for external customers as our guidance there would be to turn off unmanaged user access. This is however not possible for google.com