Starting in beta 3 (21A5284e) there is a note in the release notes about being able to prevent iCloud Private Relay using the Restriction payload with a boolean key of allowCloudPrivateRelay. The macOS device must be supervised.