split EnforcingMode into its own file, and add unit tests for true/false special-case values.