How long does this one-time scan take to complete on endpoints assigned to that policy?