[ssu] Prefer device-specific keys over variant keys