Mac Deployment In Education

Just starting to think about this and have done a test and getting quite frustrated. After I have installed the engine and a student opens the launcher it asks for an admin password, not ideal. Then when this is authenticated and the launcher starts it wants to install the engine and content again!
The WIKI for mac deployment is sadly lacking in actual substance. Should there not be an environment variable to set?
Also the advice to install and then image the whole Mac is just not an option for most these days. This kind of process has been deprecated by Apple anyway and will not work on new Macs.
There must be a better way right?
MacOSX 10.13.6
Please help!