Hello itdept_head,
we re-tested it and we cannot reproduce

Would you mind to share some logs, console output, etc.?
In our lab following scenarios were working:
- elevation on macos 10.13.6 in account that installed the AV
- elevation on macos 10.13.6 in account that didn't install the AV
- elevation on macos 10.13.6 in account that installed the AV after upgrade from macos 10.12
- elevation on macos 10.13.6 in account that didn't install the AV after upgrade from macos 10.12