IOBluetooth API is broken in more than one way, as others noted:
Daemons cannot access IOBluetooth anymore.
An application has no way to detect this situation. API returns an empty array if there are no Bluetooth devices connected or if access is not granted. No errors. Diagnostics is impossible.
No MDM payload for allowing Bluetooth access. Not sure how it was planned to be done in an enterprise environment.