Grant device (one-time, needs user gesture)