https://www.petervanderwoude.nl/post/always-apply-baseline-to-co-managed-devices/