User-preference-write or file-write-data sandbox access on Mac Catalyst using CloudKit

I am working on adding support for macOS for one of my iOS and iPadOS apps. I got everything working to the point that it would run but as soon as it tried to load the CloudKit data store it crashes with the repeated error "setting preferences outside an application's container requires user-preference-write or file-write-data sandbox access." What would be causing this error when running the app on macOS and it tries to load user data from CloudKit? I have allowed incoming and outgoing connections and allowed User Selected Files to read/write. What am I missing besides this?