Per-device VPN access control by HWID

[ComorDev]

Hello,
Could Xray add a way to identify devices during VPN connections and let administrators block or restore access for a specific device?
At the moment, blocking a device from fetching its subscription does not stop it from using a configuration it already downloaded. The server sees the credentials in that configuration, but cannot tell which device is connecting.
The goal is to manage access by device HWID while keeping the user’s other devices connected. A client-reported HWID can be spoofed, so a stronger approach may require a device-specific key that the client presents when connecting and the server can revoke.

If there is an existing way to implement it, please point me to the relevant documentation.