BYOD policies in the public sector: challenges and best practices