Updates to cert:enroll to guard against having no CSR paths provided.