What is and how can I test “protect the raw local disk device” option used in an IPS policy.