Velociraptor On-Premise deployment questions

I’m in the process of deploying the tool on my on premise network, a few questions:

1. The documentation doesn’t include AD managed users and only local users, it’s a bit of a security concern, we don’t want the hashes to be stored locally for such a high privilege system. Any other solutions?

2. We want to deploy the agent on-demand in case of an IR incident, what do you recommend in order to do that?
What Im working on: …

blueteamsec deployment documentation don hashes high local locally managed network on premise premise privilege process questions security solutions system tool velociraptor