This comment has a workaround. If you can just create a temporary user to run the script, that might be safer. curl | sh requires some trust in any case. That way you can at least be sure that everything works as intended, while also limiting the amount of damage that a bug in the script can do.