Is there a maximum time from when a policy is patched to when a device syncs the newly patched policy? As an example if a device is provisioned and active then powered off,