For the Work Hub:
You can disable authentication for the Work Hub download by going to: Settings -> User Authentication and enable "Allow client download without authentication"
Once you install the app, you need to log in once for it to get policies and configure MDM (if you have it enabled). After that, end users don't need to log in unless they're downloading apps/docs or upgrading Work Hub.
For Norton Mobile Security:
You can distribute the APK for NMS to be installed on devices and then have MM send an email with the activation link for the user. This does not require the user to log in.
Does that help?
Adam