Not OP but I submitted one for this. I'm in the same boat and wish a Device Management Service could handle the small but annoying calls to authorizationdb that we need to do on every Mac. The only two I can think of right now are Forgetting a Network and Adding a Printer. FB23048818. Thanks for everything you all do.

While I can't talk for the OP, it sounds like one of their end goals might be to have forceWifiToAllowedNetworksOnly on macOS, as you've suggested. If thats the case I can wholeheartedly agree with this request. We are a K-12 1:1 Managed Mac School and this key coming to macOS would solve a variety of issues. Example: The Classroom app is entirely dependant on the student being on the same network. Forcing Student devices to only connect to managed networks during school hours, removes their ability to switch SSID's to circumvent Classroom management. Feedback was submitted for this last year. FB17222601

FB23047699 - Adding onto the pile.