Please allow the ability to create a device policy and apply it to a single SSID rather than than an entire profile. This should be the case for any policy; SSID aimed not profile. Maybe provide the ability to apply is to an SSID or make it global for the profile.