No contacts after notarisation

I’m trying to notarise an installer app with SD Notary. The installer installs an app which needs access to Contacts. This works fine in the app. But when after notarisation I only get “denied” for the Contacts. Which incantation do I need to set in SD Notary to make this work? I can successfully notarise the app with AppWrapper if I only do notarisation. For the fully automated notarisation I get the same issue was with SD Notary.