The challenges of architecting a secure multi-million device management system