https://www.petervanderwoude.nl/post/conditional-access-and-device-state/