1) Don't use device names to administer but instead use MAC addresses.
2) Create a Group to assign all profiles. For example, create a group called Kids...set rules for this group...and use this group as the default for all profiles other than yours and perhaps smart household devices.
I don't know what you're using to administer so this may not even work. Just ideas.
Thanks, the problem is that at1am he will change his device name to make it look likable a new device. He has the password. This just bypasses the paused device. Would like to fix without drama, but that may be necessary. Note, I could change the password every night and change back in the morning...