com.apple.security.app-sandbox com.apple.security.files.user-selected.read-write com.apple.security.network.client com.apple.security.network.server keychain-access-groups $(AppIdentifierPrefix)com.veilid.example