I don't understand why you wouldn't have a hardware whitelist, and a way for new hardware to opt in.