Comment by Ductapemaster

No need — I simply plugged into the exposed programming header on the gateway.

The sensor has an Atmel SAMD part which I assume has the security bit set. I didn't need to dump that firmware directly as it exists within the gateway flash.