How do I check if device signature enforcement is disabled