I just had a duh moment. Local accounts with SecureTokens can't be
changed without supplying the old password which Jamf isn't going to
implement for security reasons. Best option (generally) is to either
move away from local admin accounts or levera...