How to prevent users from disabling GSA client on their managed devices? (Can't find mentioned registry keys in the registry keys directory)

Hi all, I am exploring the GSA solution for managing internet access. I am wondering if there's anyway to prevent end users from tampering with the protection (for example disabling GSA client from their end to browse restricted websites). I have tried editing the registry keys but I didn't find the ones mentioned in the documentation. Really appreciate your help!