Mojave 10.14 - Cannot read the admin.plist (yes even as root)

[scottdermott]

So Apple has once again moved the goal posts...

Since Mojave 10.14, "/private/var/db/dslocal/nodes/Default/" cannot be accessed..

sh-3.2# id
uid=0(root) gid=0(wheel)
sh-3.2# cat /private/var/db/dslocal/nodes/Default/groups/admin.plist
cat: /private/var/db/dslocal/nodes/Default/groups/admin.plist: Operation not permitted
sh-3.2# ls -alh /private/var/db/dslocal/nodes/Default/groups/admin.plist
-rw------- 1 root wheel 569B 7 Jun 10:27 /private/var/db/dslocal/nodes/Default/groups/admin.plist