route: add device to allowed path to support device-specific settings