I was able to eventually fix this by changing the option under FileVault > Defer Settings > Maximum number of times users can by pass enabling FileVault before being required to enable it to login from -1 to 0. After I made this change the FileVault profiles installed without issue and I no longer received the CPDomain error.
... View more
