I think what I have to use is a combination of Horizon Agent and Horizon Direct-Connect Agent, I need to point the Horizon Client to the Horizon Direct-Connect Agent and then I'd only get the Office/Shared applications and not all the applications the user has access too.