Rename --trusted-device to --trusted-device-certificate in the KDM CLI.