application-identifier $(AppIdentifierPrefix)$(CFBundleIdentifier) get-task-allow keychain-access-groups $(AppIdentifierPrefix)$(CFBundleIdentifier)