In the current betas, there's actually more entitlements that allow this, not just private ones.

com.apple.private.uexc as well?