is it possible to not configure the deb linux installer (using fleetctl) with the enroll secret? Im looking to make the deb installer publicly available (i.e. s3 bucket) and would prefer to not open that to malicious actors

Perhaps set the enroll secret to a placeholder value and then overwrite it?