Precondition for #781: - add orphaned_at field to device - introduce special orphan user
Precondition for #781: