1. A non-transitory computer readable medium comprising instructions which, when executed, causes a hardware processor to: display, by a workspace application, a set of applications that a user has permission to access at a current time, wherein each application of the set of applications includes policy enforcer instructions that apply a time-fencing policy that locks the application if the application is not supposed to be used at the current time; responsive to a request to access a first application of the set of displayed applications, determine, by the workspace application, whether the user has permission to access the first application based on the current time and a location of a workspace device executing the first application; assign, based on the policy enforcer instructions, a unique identifier to the first application; cause, by the workspace application, the policy enforcer instructions in the first application to intercept system calls and framework calls on the first application and replace symbols for the intercepted system calls in an in-memory symbol table with predefined symbols and the framework calls with predefined calls; and cause, by the workspace application, execution of the first application following the interception of and the replacement in the system calls and framework calls on the first application.