OSH - Client is installed.

Open it from Applications, or run osh in a terminal.

On first launch you will be asked to enrol this machine: the request goes to an approver's iPhone, and access begins once they approve it.

If osh is not found, open a new terminal window so it picks up /usr/local/bin.