The "not enrolled as a trusted device" error message is now generated from a single function, ensuring consistent text: "this device is not enrolled as a trusted device; run /login to enroll".
Evidence
Centralized message function (search for "this device is not enrolled as a trusted device; run /login to enroll")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
