I found a solution. You need to connect to the main router via ssh and connect the candidate with the command: mws acquire <candidate MAC> eula-accept no-update
The MAC address you need to specify is the one that the candidate gives over the wire, and not the one on the device's sticker