We are seeing some 10.13.6 gatekeepers not working correctly, thinking
that the MDM still needs to approve the extension, and never giving a
user the Allow prompt. Even though the configuration on the Mac
explicitly is User Approvals Allowed says Yes...
