Add a veto if a .desktop file has NoDisplay=true

This fixes an incomplete port from explicit error to veto.
Thanks go to Elad Alfassa for finding the initial problem.