Modification of custom MDM profiles

[SMaddock]

From Creating an MDM Custom Configuration Profile Policy:

JumpCloud signs the custom configuration profiles that are uploaded to the policy and modifies the following attributes within the profile:

• PayloadIdentifier
• PayloadUUID
• PayloadRemovalDisallowed

Why is this? We’d prefer to have control over our config profiles, that what we create and sign ourselves is what’s being deployed to endpoints. It also makes it harder to audit when the IDs and UUIDs are changed.

[TomBridge]

Hey Shawn,

Do you really want Removal Disallowed turned on? Does it actually matter to you what the UUID is?

I can understand wanting control over the PayloadIIdentifier, but the others are mysterious to me, as is your desire to sign profiles that we're delivering. Can you share a little more?