This was tested on Catalina
Post
Replies
Boosts
Views
Activity
Is it your container app that needs com.apple.security.cs.allow-jit? Or the Network Extension provider itself?
It is my container app, but if I understand correctly, I need the same set of capabilities on the main app (in our case, packet-tunnel-provider)