Change: Guard acl from being evaluated on windows

def.cf_runagent_shell is not used on windows, and having the acl in
place produces unwanted event log entries.

Ref: https://dev.cfengine.com/issues/6555
Merge pull request #319 from nickanderson/redmine/6555

Change: Guard acl from being evaluated on windows