I used Radar to create a ZTNA + Next Gen VPN activation profile for iOS,
exported and used that in Jamf Pro to create two iOS Configuration
profiles, for Supervised and BYOD devices. These contain per-app VPN
payloads that match the setup instruction...