You hope that no one else apart from the code maintainer has access to this. If a miscreant gets into your script distribution point how many remote systems would it trash?

I would not take the risk. Sign the data with a key not present on the distribution platform and have the remote systems verify that signature, at the very least. Plenty of other steps you could take in addition.