If it's like how iCloud Keychain works now, you have to approve the new device on every existing device, and I believe each device pair generates keys known onl

If it's like how iCloud Keychain works now, you have to approve the new device on every existing device, and I believe each device pair generates keys known only to them.