Some notes

• Smartphone, as pseudo-registrar can still access audit-log from MASA!

• Smartphone identity is pseudonymous, but MASA still logs it, so smartphone can recognize “itself”
• Opportunity for further enrollment provided via OAUTH2 interaction between MASA and Smartphone