make device_claim/device_release operate on the device_user instead of the device...