Generate the installer from within the SEP console, then script it to run without any switches. The installer the SEP console generates will include the password, a silent install, and a reboot at the end.
If the client are talking to the SEP manager then disable the uninstall password.