MDL-46509 enrol: fix usage of incorrect capability check