Devices should be required to "opt-in" to X.509 device certificates. So the `certificate` entry type should be evaluated.
Devices should be required to "opt-in" to X.509 device certificates. So the
certificateentry type should be evaluated.