For those interested I made a script with that can be triggered by a
launch daemon as a contingency for when the configuration profile stops
working. It's not the most elegant solution but it seems to work for our
data security needs. It also doesn't...