I installed Graphene OS on the new Pixel 8 device I got for my employee. However, I would like to customize the system a bit more. I don't want any applications to be installed on the device except for the ones I allow, and I want to be able to manage the device remotely like an MDM application (data wipe, app installation/removal) when necessary. What applications should I install on the system and what configurations do you recommend for this purpose? Additionally, is it possible to protect the bootloader with a password only I know?