Is it possible that SOTI can make it so that there are separate enrollment rules for Work Managed vs Work Profile mode devices?  I keep getting users that enroll their devices as Work profile when none of our profiles are setup for WP mode.  It would be nice to block android enterprise enrollment if it is not Work Managed Device owner.