@stevemaser have a look at the solution from this page: https://soundmacguy.wordpress.com/2018/12/04/hello-eset-endpoint-antivirus-deployment-management-and-migrating-from-scep/
I'm in the same situation as you are. It would be great if this were simpler. I hate running scripts that monitor for new users to inject stuff like this. But this is the best solution I've found at the moment, and it's working well for me to configure it for existing and new users. Outside of an issue with Mojave's PPC asking for full disk access with the v6.7.500, but that's a separate issue.
I'm more than a little surprised though, that the default config would be to have a dock icon for the client that could be easily closed by a simple click.