@tijones's note works great for me in Mojave - very helpful in a lab
setting. This causes the computer to restart whenever you click restart
without prompting for authentication (or notifying you that someone else
is logged in, for that matter). sudo...
From my looking into NoMAD, the synchronization it offers is for the
user account password (which is handled by AD automatically, if you're
binding to AD), which is different from the Keychain password. In our
environment we are still binding to AD, ...