Thanks for kind wishes. That’s correct, NativeConnect uses Private API, similarly to Fastlane and all other tools for ASO. Let’s hope for the next WWDC, maybe Apple makes them public.
As far as I remember, TestFlight in 2010 used both yours and their own enterprise certificate to sign apps with Apple and distribute them for public. Not sure however, sorry