Does the MCS Registration token relate to just the Sophos Central account or does it also relate to specific sub-estates as well?