Application and device control policy does not block USB devices