Actually I was considering another user with dba privleges, but with the SYSTEM account apparently not required to be in a unlocked/enabled state, and the connect / as sysdba working for me I wouldnt need the additional account.