com.apple.security.app-sandbox com.apple.security.application-groups $(TeamIdentifierPrefix)com.userscripts.macos com.apple.security.files.user-selected.read-write com.apple.security.network.client