For BYOD best practices, secure data, not devices