I understand the security concerns that prompted the removal of Cleanwipe's silent mode, but you need to come up with a way to let us do that when it's a genuine use scenario...
SEP upgrades never succeed 100% - we've averages 95-97% over the years - and we manage 40000 PCs that get the software remotely pushed to them via deployment tools... When upgrades fail (regardless of reasons, not Symantec's fault necessarily) we need the option to push a cleanwipe and re-attempt an install...
I understand that is sort of back in v14 now - creating an install package that cleanwipes first - but we're not on 14 yet, and now we need to send field techs to attempt to cleanup 500+ PCs in hard-to-track locations. That is something that in the past we could script with cleanwipe and resolve at least 50-70% of remotely... That's no longer an option, and therefore we're even less in compliance until we can find all those PCs, so the attempts to make this more secure makes us less secure ;-( If you fear misuse of the functionality, maybe building it with an expiration date or some signature would help.... Taking that option out is killing us...