Does anyone know how this actually works, technically?
Are these apps using some kind of special API? (If yes, what's to stop other people's apps using that API?)
Is it because they are signed with some kind of special entitlement?
Is it due to some combination of both? (Maybe you have to use some magic API, but you need to be signed with some magic entitlement to be allowed to use it?)