I've been transferring domains from one account to the other at Namecheap and it never even occured to me to unlock them... presume Enom itself would be the same... so I guess you don't need to. Maybe someone else can verify.
i just pushed my domain to a different person's enom account
without unlocking it.
the domain has been pushed successfully,
and remained locked with the guy's account.