No enrolled kiosk device

A kiosk must be enrolled and named by an administrator before it can record attendance. Revoked devices cannot submit new trusted events (CLK-011).