compliance manager process - select by VTMOS realm AND device realm

In a Compliance Manager process, we need a way to get it to select the devices to run policies against by both VTMOS realm AND device realm -
the GUI currently only allows either/or and we really need to be able to do both.

E.g. at present we can configure a process to run a policy A against all devices in realm Z, or we can configure it to run policy A against all routers in all realms, but we can't configure it to run policy A against all routers in realm Z.

The way it works at present,
a/ It means that each policy gets checked against ALL devices in the realm identified by the process filter, which does not seem very
efficient. (I understand that the VTMOS filter on the policy will stop it from getting very far – but it seems to me that it will be
initiating this check un-necessarily on all devices in the realm. If the filtering could be done at the process level, it would not even
need to start checking devices that were not the desired VTMOS).

b/ It means that we can't have a truly GENERIC policy (e.g. “every device must have a hostname”) and run it against routers
in realm A every Monday and against switches in realm A every Tuesday.