1. A non-transitory computer-readable medium embodying program code executable in at least one computing device, the program code being configured to cause the at least one computing device to at least: determine whether an installation token is present in managed configuration data for an application; execute the application as unmanaged based at least in part on a determination that the installation token is not present in the managed configuration data; and based at least in part on a determination that the installation token is present in the managed configuration data, determine whether to execute the application as managed or execute the application as unmanaged according to at least one of: whether a keychain installation token is present in keychain data for the application, a value of the keychain installation token, and a value of a launched flag in user default data for the application.