If you simply want to erase the Mac and reinstall macOS, you only need
to go to the "Recovery Assistant" menu and select "Erase Mac", which
does not require a key/password since it does not unlock the disk. This
is true both on Intel and Apple Silico...
If you enable FileVault on your devices (which, in my humble opinion,
you should be doing), this essentially becomes a moot point. User will
be prompted for the recovery key as soon as the device boots into
There's not much you can customize or manage in Safari (in comparison
with a chromium based browser) as far as I know. But use ProfileCreator
to export a .plist or MCX and upload it Jamf. It works great!