Enroll passkey

Requires ADMIN_BOOTSTRAP_TOKEN.