He's wrong, it's possible. It's just that root privileges alone is insufficient due to how the signing on LocalPolicy works on M series Macs https://support.ap

He's wrong, it's possible. It's just that root privileges alone is insufficient due to how the signing on LocalPolicy works on M series Macs https://support.apple.com/guide/security/contents-a-localpolicy-file-mac-apple-silicon-secc745a0845/1/web/1#secb7cb6686c https://support.apple.com/guide/security/contents-a-localpol... The manpage for the command provides information on credential usage on Apple Silicon devices.