Allow verified to be offered without audit

@ormsbee @flowerhack 

No tests as of yet, but I want initial feedback before I start digging into that.
seems like you could still hit the auto-enroll if the only mode is 'audit'?