Enrollment (LAN + WireGuard)