Currently there's single permissions checkbox for all device actions, including device wipe. It would be a nice security improvement if we could limit device wipe privileges to only certain accounts and api keys.