If you assign your app to a desktop or a pool, it will show up to everyone and those who are not in the PermittedGroups will get the Permission denied message.
If you want to make a user-based deployment, you are only solution is to go with thinreg.