"""So, what can we do with all of this? We have a few options, but none of them are particularly appealing. ...
Download the file with curl. Unix command-line tools like curl and tar don’t add the quarantine bit to the files they create on macOS, so it’s pretty easy to run software downloaded with them.
Unfortunately, the repository where this tool is developed is private, so unauthenticated curl downloads won’t work. I’m seriously considering asking the CTO if we can make the repository public solely so we can use curl as a distribution mechanism. I could even write a platform-detecting shell script! """
The "curl ... | sh" technique could get pass through the authentication information for a subsequent curl call, but then authentication becomes a facade.