Auto-enrol opt-out should not be option