fix: improve mfa.enroll return types (#956)

fix: improve mfa.enroll return types (#956) #468