We are in the process of implementing Airwatch MDM. For the iphones I will need to specify an Apple ID (on all of them). Problem is that, before you can download any app from the Apple Store, there must be a valid credit card on your Apple (ID) account (I experienced this recently. But if your experience is different, please help me understand). I cannot afford to let thousands of employees possibly download premium apps inadvertently. Can I create an Apple ID that will only ask for payment information if a premium app is requested? Better yet, can I have an Apple ID that will not allow downloading of premium apps? How is this concern currently being addressed in the corporate world?