Alan Siu's Blog
Took me a while to track down how to do this. Found the solution at JAMF Nation: Allow Security Preference Pane non admin