Is it possible to not have the play store locked but have the action of installing an app locked?
You could use App control functionality tho - user will be able to install the app, but won't be able to launch it.