Ability to allow some apps to be dowloaded/updated through CC and not others

We are an agency. When we allowed users to download apps on their own we had issues with InDesign users upgrading and not being in sync with everyone else and thus the file versions were off and would not work.

Now we have the opposite issue since we have turned it off the ability to download CC apps and use managed packaged isntead. Our users love and rely on the AI functions of the beta version of PS, however, it is constatly being upgraded and after a while the old version insterts intrusive banners to upgrade to the latest version. Creating managed packages constatly for the updates is time consuming and annoying.

I want to be able to allow my users to download and updated PS and other apps but not ID or anything that I need version control on throughout my agency.