I'm still wondering how to unseal a formerly protected SSV M1 volume after disabling all csrutil protections, namely:

https://twitter.com/braincode/status/1360117171842478081

Device enrollment prompts are indeed annoying :/