Is it your container app that needs com.apple.security.cs.allow-jit? Or the Network Extension provider itself?
It is my container app, but if I understand correctly, I need the same set of capabilities on the main app (in our case, packet-tunnel-provider)
jose@fyde
Users receive reputation points by contributing quality content to the forums.
Posts include post and replies published on the forums.
Post authors can mark replies as Accepted to indicate successful solutions.
Apple Developer Forums admins can mark replies as Apple Recommended to indicate an approved solution
Last seen
User for
Post
Replies
Boosts
Views
Activity
This was tested on Catalina