Download the worker ZIP (download login required).
The launcher generates a local SSH identity, enrolls this worker, and starts its outbound task queue connection. First enrollment binds the bundle to that SSH identity. No administrator rights are needed. The launcher uses a process-scoped execution-policy override.