One issue popped up - I removed the previous installation of SEP (./install -u), copied over the new version of jre files to /opt/Symantec, modified /etc/Symantec.conf to reflect the new location of JAVA_HOME, and ran the install.sh script again.
After the install.sh script finished running, /etc/Symantec.conf had reverted back to the previous version of JAVA_HOME. It looks like SEP read the system default version of JAVA_HOME and overwrote /etc/Symantec.conf, or a pointer was kept from the previous install that was still pointing at the previous JAVA_HOME.
Another anomaly I noticed was the the owner of /opt/Symantec/jre1.8.0_144 was 10:143 (not root:root) and all the files in it were owned by 10:143. I think that happened while running the install script because I would have noticed the weird ownership if it happened before hand.
Any suggestions?