For UEFI setups, "device" will generally be the special value "nodev" which represents not running grub-install at all. Using "nodev" for boot mirrors should therefore be allowed.
.nspawn