Implement strictly optional device identifier based attestation

[flawedworld]

A lot of thought needs to be put into how we can deal with such identifiers securely and privately.

[thestinger]

We can initially provide it for only the local verifications if we want.