The installer or architecture should incorporate the use of Mobile Configuration Profiles or Plist entries to store or read the Secret Keys from, which is the the standard setup for macOS apps and packages.