fix: improve mfa.enroll return types

fix: improve mfa.enroll return types #1637