I searched Apple's KnowldgeBase, and I found this tidbit:
For advanced troubleshooting purposes, you may wish to know that the Capabilities settings are stored in the "mcx_settings" attribute of each user's record. This is visible via NetInfo Manager or NetInfo command line tools, such as nicl and niutil.
I have only ever used NetInfo Manager to enable the Root_User. Can anyone help me explore this "mcx_settings" that apple talks about?