From https://support.apple.com/en-us/HT211860 said: To install a new or updated kernel extension in macOS Big Sur, you can do either one of the following:
- Instruct the user to follow the prompts within Security & Privacy preferences to allow the extension, then restart their Mac. You can permit users who are not administrators to allow the extension using the AllowNonAdminUserApprovals key in the Kernel Extension Policy MDM payload.
- Send the RestartDevice MDM command and set the RebuildKernelCachekey to True.
Is There a way that user dont need to click "Allow" in Security & Privacy preferences ? The udpated kernel extension can be loaded after the user restart the computer?