Add the option to enable apps only for specific groups

![](https://i.imgur.com/7vUQiCy.png)

cc @karlitschek @DeepDiver1975