Airwatch MDM profile

Is it possible to use an access policy with APM for ActiveSync traffic, to require an MDM profile or certificate before access? I don't want to use cert auth, I would just like to require the MDM certificate or MDM profile exists on the device before allowing access to activesync connection.