Quinn / Eskimo,
I'm not sure if other entitlements require manual code signing, but this specific one does not - or does not anymore. After adding it to our App ID in the developer portal and adding it to the entitlements.plist manually, Xcode was kind enough to automatically generate the new provisioning profile.