PRIVATE CONTROL PLANE
Only addresses on this deployment's administrator list can enroll. Enrolling again replaces the password and removes the authenticator app.