disallow allow apps downloaded from
While looking for similar I found this link on here - info about how to reverse 'enable' in Terminal might help?

Allow applications downloaded from anywhere in macOS Sierra

Specifically this section: 

Granted this is a little overkill, but it does the job reliably. It
can be re-enabled immediately after launching the application with

sudo spctl --master-enable