On a Knox enabled Android device how do I block access to the user to that device upon termination. I used Lock Device but after reading that seems to simply require them to put in their password (which they know). Do I need to somehow mark it as lost or something until they return it?