fix(enroll): fifth audit hardening — guards, atomic writes, docker check

fix(enroll): fifth audit hardening — guards, atomic writes, docker check #147