title: killed app because its use of the keychain-access-groups entitlement is not allowed (error code -67050)
body: <p>I'm trying to convert an older family of applications to modern standards. In doing so, one requirement is to link them all together using Keychain Groups and App Groups. However, once I do this, I get the following crash logged in <strong>Console.app</strong>:</p>
  
  <pre><code>6/28/18 11:13:10.295 AM taskgated-helper[507]: embedded provisioning profile not valid: file:///Users/me/Desktop/Primary App.app/Contents/embedded.provisionprofile
  6/28/18 11:13:10.295 AM taskgated-helper[507]: Found 0 provisioning profiles
  6/28/18 11:13:10.295 AM taskgated-helper[507]: Disallowing com.company.OurApp[pid 510] because no provisioning profiles found
  6/28/18 11:13:10.295 AM taskgated[101]: killed com.company.OurApp[pid 510] because its use of the keychain-access-groups entitlement is not allowed (error code -67050)
  6/28/18 11:13:10.314 AM ReportCrash[509]: Trying to extract VM information using cr2
  6/28/18 11:13:10.343 AM ReportCrash[509]: Saved crash report for Primary App[510] version ??? to /Users/me/Library/Logs/DiagnosticReports/Primary App_2018-06-28-111310_My-Mac.crash
  </code></pre>
  
  <p>The crash log contains these lines which are common to certificate/entitlement issues:</p>
  
  <pre><code>Exception Type:        EXC_CRASH (Code Signature Invalid)
  Exception Codes:       0x0000000000000000, 0x0000000000000000
  </code></pre>
  
  <h3>Setup:</h3>
  
  <p>Built on <strong>macOS High Sierra</strong> using <strong>Xcode 8.3.3</strong> <sub>(I know...)</sub>. Crash occurred while testing on a <strong>Mac OS X El Capitan 10.11.6</strong> VM <sub>(I know...)</sub></p>
  
  <hr>
  
  <p><sub>This is related to <a href="https://stackoverflow.com/questions/27279135/code-signing-issues-and-crashes-after-attempting-to-set-up-keychain-sharing">Code signing issues and crashes after attempting to set up Keychain sharing</a>, which involves different components on a different OS, but seems to have the same root cause</sub></p>
  
  <p><sub>This is also related to <a href="https://stackoverflow.com/questions/33829849/mac-app-signed-with-developer-id-fails-to-start-i-get-com-apple-developer-netwo">Mac App signed with Developer ID fails to start, I get com.apple.developer.networking.vpn.api entitlement is not allowed (error code -67050)</a> which is caused by a different broken entitlement, but has the same end result.</sub></p>