Conditional Access device filter: why yours matches nothing, and what it cannot protect
An unregistered device has null for every property, so a positive operator can never match it. The mode and operator pairs that hold, and the ones that quietly let devices past.


