Not about enrolment. A push consumer delivers onto an ordinary subject and everything subscribed to it gets a copy; the controller's two consumers were both named after it, so both were given the same subject and the one process acted on every message twice. Enrolment is where it drew blood because a second enrolment mints a second credential.