In single SSID onboarding, which of the following methods can be used in the Enforcement
Policy to distinguish between a provisioned device and a device that has not gone through
the Onboard workflow?