[Pki-users] Dir based enrollment question