added firstrun flag

disables unknown devices only with explicit user permission, keeps input
devices from being disabled when their use is required for interaction