Function arm_device_proof 

pub fn arm_device_proof(device_secret: &[u8])

Arm this process with the device secret it just read. Only the key derived for proofs is kept.