I think we added the ```enroll``` inside of this class since the AG Security (e.g. the JS client), by default, uses ```auth/enroll`` for the endpoint name. Sure that can be overridden, but if I recall correctly @lholmquist did prefer it that way, as it currently is.

But for a cleaner user management, I do agree that the ```enroll``` should be part of the "Admin / User Mgmt"  Endpoint.

Looks like @lholmquist needs to update some JS config :-)