clear
        Clear the existing configuration. Only available in Recovery OS.
    disable
        Disable the protection of the OS installation. Only available in Recovery OS.
    enable
        Enable the protection of the OS installation. Only available in Recovery OS.
    status
        In Recovery OS, displays the configuration for each OS installation.
        In macOS, displays the configuration of the running OS.

    authenticated-root
        status
            Show the current authenticated root setting.
        disable
            Allow booting from non-sealed system snapshots. Only available in Recovery OS.
        enable
            Only allow booting from sealed system snapshots. Only available in Recovery OS.