Push allowlists, blockers, and wipe rules to enrolled Ghostly Browser devices. Sessions stay empty on disk.