well, it needs some additional conf on deploy: if version > mojave flags.append('--endpoint-security')