Comment by Avamander

Out-of-band pairing is a better idea, e.g. some key on the bulb has to be entered or scanned or read on the device.