Device provisioning at scale