Enrolls an identifier in monitoring for your company. Requires a valid consent for the identifier, unless you send ip_address: then a consent is recorded with that IP and your company's privacy notice, and the monitoring does not expire (expires_at is null). Otherwise expires_at is the consent's expiry.

If your company has no verification of the identifier in the last 30 days, the first verification runs right away; otherwise it runs 30 days after the last one. After that, the identifier is verified again about once a month while the monitoring is active.

Idempotent: enrolling an identifier that is already active keeps its enrollment date and only extends its expiry with a newer consent. A cancelled or expired monitoring becomes active again.