MCX: "mount-control" options

[JPDyson]

I'm trying to adjust the restrictions for external media, and running into a bit of a pickle. Settings follow...

<dict>
    <key>blankcd</key>
    <array>
        <string>authenticate</string>
        <string>eject</string>
    </array>
    <key>blankdvd</key>
    <array>
        <string>authenticate</string>
        <string>eject</string>
    </array>
    <key>cd</key>
    <array/>
    <key>disk-image</key>
    <array>
        <string>authenticate</string>
        <string>read-only</string>
    </array>
    <key>dvd</key>
    <array/>
    <key>harddisk-external</key>
    <array>
        <string>authenticate</string>
        <string>read-only</string>
    </array>
    <key>harddisk-internal</key>
    <array/>
</dict>

The settings for cd, dvd, blankcd, and blankdvd all work fine. The options for disk-image and disk-external are where I run into trouble - namely, no authentication prompts. It just goes straight to read-only. I don't have access to the MCX editor to see what options are available on OS X Server, so can anybody help me out here? Can I even do the two-step authenticate then read-only like I'm trying?

[jserapio]

I am in the same boat. I read another post saying that it was an apple bug in 10.8.x. If this feature, through any means(MCX, config profile, script) does not seem to work. Since this doesnt work, I created scripts to remove kexts (Which get replaced in updates) and it makes things more difficult than they should be.

[JPDyson]

Luckily I'm not backed into the corner of having to replace the kexts yet (we have some leeway).