We would like to suggest to add to your catalog the app Admin by Request, provided by the vendor FastTrack, it's an app used to manage the admin permissions in the endpoints according the the profile assigned to each user, and those admin sessions will have a limited time for using.
The agent installer can be downloaded only when logged to the vendor admin portal, so the app could be added to the catalog with the option "This product requires a manual download".
We would also have use for this applications for one of our MSP Clients
Here is the link to the product:
https://www.adminbyrequest.com/