It might be interesting to allow app installation from everywhere for admins while restricting "normal" users to Mac App Store apps