Securing the “bring your own device” policy