https://www.petervanderwoude.nl/post/merging-endpoint-protection-policies-in-configmgr-2012/