That's totally reasonable, but maybe it'd be nice to mention either the `unenroll_done` signal by name or the `refund_cert_callback` function, just in case someone else wants to figure out the code path that would trigger those lines.