You should follow a consistent pattern for returning `success` or making assertions.  In this case, I would merge this function with `enroll()` below and perform the assertion there.