Deploy

Install the engine on each machine once (installer or MDM); author and deploy policy here — enrolled engines pull it on their next check-in. Install and deploy can happen in either order.