That reminds me a bit of the above topic. Maybe it could discuss further on the basis of a master key that can only be valid for one device. If the key is withdrawn, the associated connections are also invalid.
The introducer feature could maybe also be considered in this case, but I cannot conclusively assess that. In general, I find the feature a bit confusing.