https://www.petervanderwoude.nl/post/using-sensitivity-labels-to-manage-access-to-sharepoint-sites-on-unmanaged-devices/