pkgutil --expand-full flattens the component payload to loose files that --flatten cannot repack, producing a pkg Installer accepts but installs nothing from (also breaking the postinstall auto-open). Use nested regular --expand: product for the Distribution domains edit, component for the postinstall sudo-prefix removal.