Prior to OS X 10.12, we had a Security and Privacy payload with no
firewall options configured. Users with admin rights could authenticate
and disable the firewall or change its options as needed. We then
enabled the firewall via Policy and a script ...
