[gok]

You need a second factor (physical access to a device already in the circle) to add a device to the iCloud Keychain.

Edit: I see you are worried about devices already linked