Chromebooks taking too many RDS device CALs, why???

Question

We have a Citrix environment where 8-12 people a day log in within Chromebooks.

It seems each Chromebook is presented as a unique device every time it's used so all our device RDS CALs are being used up with over 2000 temporary CALs given out, which apparently chokes out Windows computers that get told they will be logged out in 60 minutes...

I can revoke licenses but not that many and it's very tedious doing this one at a time, I could not find any usable scripts for this...

What/why do Chromebooks take more device RDS CALs than they should????

MAC addresses are apparently not randomized for Chromebooks.

Thank you, Tom