I recently enforced BitLocker Recovery Password backups to AD through Group Policy. (Which is awesome, BTW.) While Domain Admins have no trouble viewing them, I've having trouble delegating these ...