the device_id is semisecret