Sadly this touches on the private profiles PrivateFramework we ran into before, so I have to route it through the output of

mdmclient