acu124729 make rs_reenroll to check privileges before doing anything