By definition it must be able to see your keystrokes. What sort of policy are you looking for? I guess you could deny them internet access on a more granular le

By definition it must be able to see your keystrokes. What sort of policy are you looking for? I guess you could deny them internet access on a more granular level, but otherwise, it seems like they need pretty terrifying permissions to even work.