[Osiris]

That's how my employer does it but it's for less than a hundred devices so we just provide security the key after turning on FileVault.