Thin client showing both Apps and Desktops on 9.1.5 when storefront is configured only to show Desktops

We just upgraded to ThinOS 9.1.5 and our 3040 thin clients are now presenting the users with all their published apps as well as desktops - it was just desktops before the upgrade.

The Citrix store is still configured to only show desktops, and the WMS setting "Show Applications with KEYWORDS:Mandatory" is still turned off.

All our apps are published with KEYWORDS:Auto which may be significant.