sending the CPUS (logon/credui/...), maybe even the isRemoteSession aswell, would allow privacyidea to evaluate it as a condition.