Elastic Agent can run in unprivileged mode, but this doesn't work for agents installed using DEB and RPM packages, and never has. See elastic/elastic-agent#9918 for reference. Until this is properly fixed, we should make it clear to users that this doesn't work, and there aren't any workarounds.