Is there a MDM rule to forbidden agent user to disable login item in enterprise?

Hi,

According to https://developer.apple.com/videos/play/wwdc2022/10096/, agent user can disable login item on Ventura.

In enterprise environment, IT admin may want some processes are always running in launch daemon.

Is there a MDM rule to forbidden agent user to disable special login item?

Thank you!