Device / posture-based ACL rules

ACLs currently work on user/group level, but as requested by some of our customers, there is sometimes a need to control the access on a more granular level - device (os/version). For example:
- Windows client: RDP Access to Servers
- iOS/Android Client: only HTTPS Access to Servers and no RDP

As a workaround it is possible to create dedicated locations for different client / device types, set appropriate postures on them and then assign ACLs.

E.g.:
- Location A - postures allow only mobile OSes to connect
- Location B - postures allow only desktop OSes to connect
- We set appropriate ACLs on both locations to restrict access as desired.

❗ Postures may not be the correct abstraction to use here - maybe just store client OS during enrollment.

TBD viability and scheduling.