Improve Test-MtCaApplicationEnforcedRestrictions to detect baseline compliant device check

[merill]

In tests like Test-MtCaApplicationEnforcedRestrictions where we check for a specific setting on unmanaged devices, if there is a global setting that requires Compliant device then these specific checks are not required and may be redundant.

We should implement it as a flag, since an admin might want to have a specific test that checks for a CA policy with this setting regardless of other policies.