gpos:
- id: '{GPOId}'
  name: GPOName
  rules:
    certificate:
    - key: autoenroll
      value: "NotANumber"
      disabled: false
