Hacker News Reader

At the end a new secure on-boarding mechanism is mentioned. How does this now work?

Presumably you have to use a smart phone to connect to each bulb when you install it and send it a non-fixed key.