If you simply want to erase the Mac and reinstall macOS, you only need
to go to the "Recovery Assistant" menu and select "Erase Mac", which
does not require a key/password since it does not unlock the disk. This
is true both on Intel and Apple Silico...
If you enable FileVault on your devices (which, in my humble opinion,
you should be doing), this essentially becomes a moot point. User will
be prompted for the recovery key as soon as the device boots into
Recovery Mode.
Run a recon/inventory update on any machine. The script should return a
value that you can check in a computer's inventory, then use it as the
criteria value for your Smart Group.
There's not much you can customize or manage in Safari (in comparison
with a chromium based browser) as far as I know. But use ProfileCreator
to export a .plist or MCX and upload it Jamf. It works great!
