Allows access policies based off user identity and device security.