I'd like to create a new user via policy that is enabled for FileVault
2/has SecureToken. As noted in the Local Accounts payload, the "Enable
user for FileVault 2" no longer works in anything beyond 10.13. After
doing some digging, the only solution ...