We were able to get Crowdstrike to install and bypass the system
extension prompt by adjusting the profile to specifically target the
System Extension (com.crowdstrike.falcon.Agent) as opposed to just
allowing all system extensions from their team id...