Enable specific APM via Irule on VIP

I'm using an iApp () and I want to enable and APM config to control access to this. I can obviously manually change the VIP (turn strict checking off the iApp) and enable the appropriate APM but if someone comes along and reconfigure the iApp this will disappear.

My question is should I modify the template or is there away to use an iRule to enable a specific APM config and add this to the iApp config which won't be effected by the re-config. I'm not sure which is the easiest or better option.

Thanks