Client Authentication Agent on XG firewall installs to wrong location & account when non-admin user requires admin elevation

In our small environment users do not have administrator rights on windows 10 (1709). After a user downloads the client authentication agent from the XG portal, they are prompted for administrator credentials to perform the install. The sophos install client then installs under the location and context of the administrator's account, and not the user, so after a reboot the client agent is not installed for the user's profile and does not start. We attempted modifying the install path manually to point it at the user's account path, but it still doesn't work. The only way we got it to work was to add the user as a local administrator temporarily, execute the install, and remove the user from local administrators.