This could be useful because certain machines could be designated by default with tags when enrolled in Connectsecure to be a "pilot machine"