Make your own PPPC/TCC avoidance wrapper!

fudo.c

//
//  main.c
//  fudo
//

#include <unistd.h>

int main(int argc, char * const argv[]) {
    return execvp(argv[1], &argv[1]);
}

Makefile

CC=gcc
CFLAGS=
SIGNINGIDENTITY="insert signing identity here"
IDENTIFIER=com.someorg.fudo.changeme


fudo: main.c
	$(CC) -o fudo main.c
	codesign -s $(SIGNINGIDENTITY) -i $(IDENTIFIER) fudo


clean:
	rm fudo

Put these files in a directory.
cd into that directory
make fudo
Add a profile to your MDM that grants fudo access to all files, etc.
Profit?
/path/to/fudo systemsetup -remotelogin ON etc etc