Figure out whether customers actually need ephemeral mode or whether they just want to wipe user data, but for instance keep apps installed.

In Active Directory management mode, ephemeral mode makes login slower since some data has to be recreated each time (auth data, reinstallation of Android apps).

Maybe we could just hide PODs on the login screen and have a policy to wipe user data to prevent full disks with 30+ users per device.