RE: https://geekstodon.com/@JetForMe/117322359222802150

Okay I think I might’ve figured this out. I have `mode=developer` on my AASA entitlements, and on devices with AASA developer mode turned off, this seems to fail with

Error Domain=com.apple.AuthenticationServices.AuthorizationError Code=1004 "Unable to verify webcredentials association of <redacted BundleID> with domain <redacted hostname>. Please try again in a few seconds."

Removing that seems to have fixed my local test case, gonna try to run it through ASC again and see if a friend can no longer repro it.