Ah, in that case, unlisted release or through business manager, if you don't want to risk TestFlight (I'd personally do and have done TestFlight with internal sites where we uploaded OTA installs.)