Can't get away with one query here. Need to purge other device_policykey entries.