It only really matters if you are using SSO across the apps or not. If you only want to turn this off for one Airwatch/Vmware app, use SDK profiles and turn it off for that app only. This setting is a global setting for and SDK enabled Airwatch App (hub, content, browser, etc). I myself see no reason to have to login to the hub, but you may have different concerns.