Sideloading is enabled by default since TH2 (November Update) that came out more than two years ago. You just need to sign the package using a valid codesign ce

Sideloading is enabled by default since TH2 (November Update) that came out more than two years ago. You just need to sign the package using a valid codesign certificate.