presumably, they MUST fail the ENTNAC security check. You can’t be a lawbreaker and pass it.
I know.
This admin will change the rules...