Private owner setup

Enroll the first owner

Enrollment is available only while no owner exists and the server has been configured with the setup secret.