Restrict enrollment to the "users" group

Bug: 66624
Change-Id: I972fbe6a2f0c75e894121e98e730cc87233c087b