As far as I understand, we have to manually enter all the apps that we allow to run on the devices.
Now there are some device on which we want to use h-mdm only for deployment of apks and setting parameters to them (e.g. your WIFI manager, our version of kisok browser, …), but still allow users to run any other app.