#7: Validate client's public key

... and more descriptive API response
 #7: Screen for confirming devices
 #7: Authorize device public key after confirmation (instead of after registration)