>BYOD is likely supported, but provisioning installs the invasive device monitor

Probably not. Since they lock down which apps run or not, I doubt they'd trust some home rolled, untrusted, unverified install with unknown executables running.