This is an OS feature but needed for Tablet Experience i.e SURFACE XP.
Secure Mode: Only run curated apps, whitelisted, approved, verified non spyware or malware. NO Browser Hijacking, add-on junk or crapware allowed. Sandbox in a box (The pseudo Win RT mode of Windows) on Full Sized Tablets. If it destabilizes the system in any way, causes crashes etc. approval revoked dynamically and automatically. If the user has such an app that was previously approved but has been revoked they can only run it if they OK it at runtime, each time for 90 days allowing the owner time to fix it.
Secure Mode: Only run curated apps, whitelisted, approved, verified non spyware or malware. NO Browser Hijacking, add-on junk or crapware allowed. Sandbox in a box (The pseudo Win RT mode of Windows) on Full Sized Tablets. If it destabilizes the system in any way, causes crashes etc. approval revoked dynamically and automatically. If the user has such an app that was previously approved but has been revoked they can only run it if they OK it at runtime, each time for 90 days allowing the owner time to fix it.