As I currently understand it, the availability of a embedded application is tied to whether or not the organization has approved it for use or not.
This means that it's an "all or nothing" availability toggle at the moment.
This also makes it difficult/impossible to do the following motions:
Allow a sub-org/group to have a unique application just for their audience
Allow more than one developer to co-develop an embedded application
Allow the piloting of an embedded application with a specific group of people
Devise a mechanism by which an audience list can be provided.
A group definition in Active Directory
A mailer definition
A manually defined list