-- Preserve existing operator-managed credentials and label public enrollment.
ALTER TABLE servers ADD COLUMN registration TEXT NOT NULL DEFAULT 'managed'
  CHECK (registration IN ('managed', 'automatic'));