Make rs_reenroll to check privileges before doing anything