My whole process is explained here.
But to answer your question, I used SWD. I did not try without AV installed because that is not realistic and won’t do my any good (I can’t very well uninstall/reinstall AV on 100’s of endpoints). Plus this works manually. Plus this worked with 1703. So something is going on. I’ll try more testing with the 9.5.7.94 agent (I only tried one).