For micro-apps and appex is requiered to specify a unique embedded.mobileprovision that match app id. Applesign needs to use this embedded.mobileprovision as an extra argument only in the micro-app or appex like in watchkit apps or watchkit extensions