first draft of br-enroll reference implementation