This may be useful for anyone accessing work email (office365) using sfdroid. My company requires we install Microsoft Intune to check for android compliance, which it does fail. However, making the below changes will allow it to pass and you can enroll and get all the benefits.

SFOS; 2.0.1.11
CM:12.1
SFDROID: (FIRST PAGE)

Step 1
Under /system/build.prop
Look for ro.build.tag=test-keys
Change to ro.build.tags=release-keys

Step2
Rename /system/xbin/su to anything (I named it sux)

You can now enroll your sfdroid android environment.