Closed-pilot enrollment

Enrollment requires an authorized administrator and an explicit validity window.

No public self-enrollment is available.