I have removed the <key>com.apple.developer.healthkit.access</key><array/> entry from my entitlement file. It indeed worked for testflight, so I decided to submit it for review. Just gotten the rejection message.