KB-000035040 Sophos Central Endpoint: How to install on a gold image to avoid duplicate identities

https://support.sophos.com/support/s/article/KB-000035040?language=en_US
In the script (SophosGoldImagePrep.txt) that you can download, tamper protection is turned on again in the last step. 
This is not mentioned in the manual steps.