Thanks, that did it! I extracted notarytool from Xcode CL Tools 13.4.1 and called it directly (without xcrun), and it notarized successfully both machines. Incidentally, I noticed that this notarytool binary is a bit bigger, about 50MB instead of about 20MB.