Is this possible? And if so, how does one do it?
All I need is a handful of NSUserDefaults settings. No CloudKit, no documents, nothing fancy.
So far, I have found the following:
1) I seem to have the correct entitlement. The default value for com.apple.developer.ubiquity-kvstore-identifier is $(TeamIdentifierPrefix)$(CFBundleIdentifier). I have tried to manually set what those values are, but there is no change in behaviour.
2) I don't think I can use "Automatically manage signing". It seems to pick my "Mac Developer" certificate and doesn't allow me to change that. This is a Developer ID app, so this seems like a dead end. Just for fun, I tried the automatically managed, wrong certification with no change in behaviour.
3) I can seem to manually specify the correct Developer ID certificate and it picks up the provisioning profile correctly.
4) Regardless of how I try the signing, the app won't run from Xcode. All I ever get is "warning: Falling back to contents of entitlements file ... because it was modified during the build process. Modifying the entitlements file during the build is unsupported." As far as I know, I'm not doing anything of the sort. It spits out this message 5 times after copying various embedded frameworks and resources. Eventually I get "Message from debugger: unable to attach" in the console.
5) If I do an archive, it will run. Obviously it doesn't work. There is no iCloud functionality.
6) The iCloud tab in Capabilities seems happy.
7) According to the documentation, it isn't possible.
8) According to WWDC 2016 "What's new in Security", it is possible.
Any ideas? Hints? Tutorials? Thanks.