OSSystemExtensionErrorDomain error 10 when loading system extension

We have a customer hitting OSSystemExtensionErrorDomain error 10 when attempting to load our system extension. We have tons of successful installations at this point, and this is the first time we've seen this particular error. The error text makes it sound similar to issues with approving the kexts of old:

An error code that indicates the system policy prohibits activating the system extension.

And the unified log output further backs this up:

Code Block 2021-01-04 13:23:59.863 Df sysextd[231:b19c7] Making activation decision for extension with teamID teamID("<redacted>"), identifier <redacted>
2021-01-04 13:23:59.863 Df sysextd[231:b19c7] Extension with teamID teamID("<redacted>"), identifier <redacted> is not in the list of allowed extensions.
2021-01-04 13:23:59.863 Df sysextd[231:b19c7] Activation decision for extension with teamID teamID("<redacted>"), identifier <redacted> is Deny

The customer says that they have never seen a prompt for this system extension and nothing is listed in security preferences for it. Is there anything that will help troubleshoot this or any file that might show if system extensions have been blanket-denied somehow on this system?
Is there something that can be done in this case to clear any policy information, maybe via spctl as we do with kext approvals?

In case someone is curious, there was an MDM profile in place for a different system extension that disallowed user approvals.

Has anyone found a way to fix this error?

OSSystemExtensionErrorDomain error 10 when loading system extension
 
 
Q