Agreed on certificate synchronization... especially since a certificate isn&#x27;t the same as an account, it&#x27;s just a key for an account... Having each device have its&#x27; own cert allows you to disallow a specific device without disallowing all devices for a user account.