I am targeting Network Extension Provider to configure the per app from the MDM, but requirement to include app "com.example.app" but only for ".test.com" and ".domain.com" domains. I do see options of matchDomains tied to NEApprule object, but I am not sure how to use it on the MDM side.