looking at a zen7 to zcm11 conversion, how do we get an app to force run without user action / knowledge?

apps I need to force run are security based and I don't want a user to get a choice as to if they get it.