@rysiek 1. Client generates cryptographic secret sent to cloud infrastructure when you go to "link device" on client.
2. Device you want to link pulls this secret associated with account id you want to link. Fails if client for account is not in linking process already. Displays QR code.
3. Existing client scans QR code, only links if secret matches.