Thanks! I took a look at the Bedside clock's sources, and its aegis manifest doesn't list any extra credentials that would be needed. So it doesn't seem to require the "forbidden" credentials that are needed for Flight mode. Furthermore that discussion is from july mostly, and it's my understanding the security framework has been tightened since - so the discussion might not be relevant anymore, but the sources are and I didn't see it requesting extra credentials .

Of course I unfortunately too little about the security framework so I might have missed something.