Looks like local auth may "just work" without the DenyLocal key? I
noticed the missing button too, but am able to use a local
"administrator" login just fine...
Thoughts on creating a smart group to identify vulnerable systems? (OS
>= 10.13 and root password is null) I'd settle for a quick check to
detect if the password is null...