Add a risk associated with pairing to a whole class of devices.
Add a caveat to the requirement to rotate device IDs.