Change: Guard acl from being evaluated on windows

def.cf_runagent_shell is not used on windows, and having the acl in place
produces unwanted event log entries.

Ref: https://dev.cfengine.com/issues/6555