Refactor the function to make it more verbose so it should be
clearer what checks are happening at which point in the function,
and make the security check in general more obvious.
Also rename the function to be more consistent with auto-enroll.