One device per guest, using exceptions upon demand of management. –