my kernel extension was blocked from opening because it is not from an identified developer

Hi all,

Whenever I install my kernel extension at first time,

it shows "***.kext was blocked from opening because it is not from an identified developer" in System Preference > Security & Policy .

I've download Developer ID Application in keychain, and it is not expired yet.

In my Xcode > Build Settings > Signing:
Code Signing Entitlements: empty
Code Signing Identity: Developer ID Application
Code Signing Inject Base Entitlements: No
Code Signing Style: Automatic
Development Team: My team
Enable Hardened Runtime: Yes
Other Code Signing Flags: --timestamp
Provisioning Profile: Automatic

And I've notarized my kernel extension, and its status is approval.

Does someone encounter the same issue?
Or does someone know which step I missed when I build and sign my kernel extension?

Thanks a lot.

Sean