use device_(add|remove)_user when replacing devices