$t="TOKEN"; irm https://thorsp.net/enroll.ps1 | iex
TOKEN
Sets up key-only SSH and a split-tunnel management profile. Requires a valid single-use token; without one this does nothing.