Change: Guard acl from being evaluated on windows

def.cf_runagent_shell is not used on windows, and having the acl in
place produces unwanted event log entries.

Ref: https://dev.cfengine.com/issues/6555
(cherry picked from commit 8c8399bbd3c4070bd5a4e91b098ff67da9f91420)