Create a different profile Thomas excusively for the m1 Mac's.  Most likely this is failing only on your m1 MAC's as I've seen this happen only on the M1 (Apple Silicon) devices.  Best solution is to create a separate profile for your M1's that excludes the KEXT extension profile, once you remove this the SPErrorDomain Error 10 is resolved.  Hope this helps.     ... View more