On: Identifying backdoors, attack points, and surveillance mechanisms in iOS devices

[joosters]

I found a way: you can apply the restriction to a non-supervised device, which simplifies the process. You don't need to re-install or wipe.

Just create a profile with the restrictions, then follow the instructions at: http://support.apple.com/kb/HT5833

(Edit to add: It's actually unclear if the non-pairing restriction gets applied when using this method, it doesn't seem to get listed in the profile details once on the device)

[RKearney → joosters]

It does not. The Allow pairing with non-Configurator hosts requires that the device be supervised.