I'm seeing the same thing as the OP. I ran the commands from Quinn (thank you!) and it appears that the sysex is missing the com.apple.developer.endpoint-security.client entitlement in its embedded.provisionprofile. At least, it isn't present in the Entitlements section. How would I go about fixing that? Thanks!