https://www.petervanderwoude.nl/post/conditional-access-for-pcs-part-ii-sharepoint-online/