as an aside, I saw a

GetManagedPrefsForOurDomain

method got added to

mdmclient

. might be worth poking around there a bit