At first I just had a blank enrollment permissioned saved and that didn’t work. So I just added a single policy with an allow rule:
Incude: Emails
Value: my email address
Still not getting any email verification though, is there another enrollment rule that needs to be set?