After DEP enrollment of some iOS 12 devices (Manually using Apple
Configurator) and then adding in ASM and eventually JAMF pre-enrollment,
it seems any end user can remove the MDM profile.Once set up, JAMF cloud
shows the MDM Profile Removable as "No...