Is there a way to enable device security policy on a specific device only?