Capabilities/enrol/self:holdkey