considerations for bring your own device policy