Does fleet just generate one enrollment_token per instance? Can the same instance "partition" hosts by assigning different enrollment tokens?

There’s only one.