issue with using Cisco ASAs and smart tunnel for clientless ssl

I set up a clientless SSL with bookmarks.

Problem is that the ASA (5512x) has issues loading a couple of my bookmarks (seemingly because they are compressed? running javascript?).

Cisco TAC advised I enable smart tunnel on these bookmarks which I did but now my remote users (on their macbooks) get an error message, essentially saying it cannot install mac-tunnel.jlnp on their MACs because it is from an unidentified source (which is the ASA).

I cannot change the security settings on their macbooks and it is against company policy.

How do I bypass this?

Or is there another way to allow the ASA handle these bookmarks properly?