Wirefilter expression to match a device against when evaluating whether this policy should take effect for that device.