[existing policy to disallow updates in regulated – to extend to add “allow selected” when an admin can select from a list of available updates on a per device model basis. Also requires an option to select “latest” for model to rollout to entire fleet independent of carrier]