allow to whitelist unregistered devices from violations

[julsemaan]

Right now an unregistered device is considered the same as a registered device when looking at the whitelisted roles.

That means, unless a device has already been registered with a role and then unregistered it can't be matched in the whitelist.

We should enforce the 'registration' role in the matching of the whitelist when a node is unregistered ignoring any previous role it had and making sure it has one for matching