feld, what do you mean by "allow"? They do both tell you to "keep them secure", but I can't imagine them revoking the keys that are useless without device tokens anyway.