condition {
  title       = "Device Encryption Requirement"
  expression  = "request.device.encryption_status == 'ENCRYPTED'"
}
