Three options:

• Change this case to throw an exception, so users have to have been created with auth/mnet before they're enrolled (this breaks BC)
• Rely on the config settings from auth/mnet
• Add a new config setting in enrol/mnet

I think the first one is the "most correct" but I'm not sure....