A lot of folks have asked me about this recently, so I researched the answer and added a FAQ to my Network Extension Framework Entitlements post.
This may change in the future, and I’ll update that post if it does.
Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware
let myEmail = "eskimo" + "1" + "@apple.com"