I admin a bunch of Macs, and depend on unlocking user’s screen saver as admin. I’ve always done this editing /etc/pam.d/screensaver
This no longer works. I need to do it via security authorizationdb.
I can do it with this command:
security authorizationdb write system.login.screensaver "authenticate-session-owner-or-admin"
https://discussions.apple.com/thread/7086700?start=0&tstart=0