Allow users to mark their device as lost and prevent further access in Jamf. Verify via a push notification prompt using Duo before taking action.