This allows an external service (e.g. the matrix-authentication-service) to create devices for users.