correct  the consent is for make model information about a token  not for individually identifiable information  the only way to get the underlying attestation will be to list the rp id in the enterprise policy  because that enables the individual attestation bit in the register request and permits individual attestation generally 