Struggling to find out if this is an option, but we as a district want
to only lock down AppleIDs on our devices, but the configuration profile
option of setting MODIFYING ACCOUNT SETTINGS: RESTRICTED also locks us
out of changing email accounts. We ...