Using ADE, without using Managed Administrator or the Additional local accounts options. (Or with them on for that matter). Even an entirely regular unmodified setup assistant created admin is not receiving the secure token after logging in.
MacOS Ventura Jamf Pro 10.44
This is only happening when using ADE.
"Can you grant a secure token with sysadminctl" - No the admin account is not allowed.
I think I've won and found a way to deploy a laptop that's incapable of issuing a secure token when using ADE.