Managed Settings including Activation Lock and Personal Hotspot take effect on a one-time basis. The user may still be able to change the settings at a later time. Activation Lock, if enabled, will ensure that a supervised device registers itself with Activation Lock when the user enabled Find My iPhone. Wallpaper modifications can be restricted via a restrictions payload on iOS 9+ supervised devices. This one-time basis restriction is expected behavior.
It is not possible for AirWatch to prevent users from re-enabling certain settings, including voice and data roaming from their device, as Apple does not allow us to force these restrictions. Therefore, iOS settings can be enabled/disabled from the AirWatch Console and will be present on the device upon enrollment, however, they cannot be forced.