askForPassword key unenforceable in 10.13.1 under certain conditions

Number:rdar://35462422 Date Originated:
Status: Resolved:
Product: Product Version:
Classification:Security Reproducible:

Installing a configuration profile to enforce has no effect if the user already unchecked the Require Password setting.

Steps to Reproduce:

1) Start with a brand new Mac with macOS 10.13.1/clean install
2) As a user, open the Security tab of System Preferences and uncheck "Require Password".

3) Install the attached configuration profile to enforce with the key 

I've tested this step using the following methods
a) manual install as a user
b) with MDM as a device level profile
c) using the sudo profiles -IF /path/to/profile.mobileconfig

all methods are able to reproduce the issue if the user has changed the setting manually before the profile was installed. 

Expected Results:

I expect the profile to be installed and for the Require Password checkbox to be green. I also expect the user to be prompted for a password after the screen saver comes up. 

Actual Results:

The profile is installed. The enforced policy appears to be ineffective as the user is never prompted for the password. Before a reboot, a user is able to click/unclick the Require Password checkbox even though the profile exists. 
Rebooting does not cause the preference to take effect, but it grays out the checkbox as unchecked (attached screenshot)


attached profile and screenshots

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "">
<plist version="1.0">
			<string>Security &amp; Privacy</string>
	<string>E Corp screen saver settings</string>
	<string>E Corp Screen Saver</string>
	<string>E Corp</string>


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!