Unfortunately due to the permissions Shelter gains over the applications in the work profile, I’m hesitant to use it. Judging by this text they have in the app:
By default, Shelter will not ask for any individual permissions. However, once you proceed with the setup process, Shelter will try to set up a Work Profile and hence become the profile manager of said profile. This will grant Shelter an extensive list of permissions inside the profile, comparable to that of a Device Admin, albeit confined to the profile.