I’m not familiar with this but interested in trying it. From what I see they do and you need a certificate from them from a Enterprise Developer Account?

They can, and have, revoked certificates for arbitrary reasons.