Based on the example EvenBetterAuthorizationSample, we are blessing a helper to enable our Sandboxed container app the communicate with another process via XPC.
When the helper is installed, it requires the user to authorize the helper providing admin credentials via a popup. This makes distribution difficult where customers want to push our app to their staff devices but the staff members do not have admin access.
Our product also uses a content filter, for which our customers can push a MDM profile to allow the system extension and content filter to be activated without needing user interaction.
Is there an equivalent profile that can be provided via MDM to allow the privileged helper install without needing the user to provide credentials?