Failed to verify code signature

I've been working on this app for several months now and one of several builds I push from a new test flight in iTunes Connect cannot be installed and when I plug my device into my computer to look at the console I see a message about error

"Failed to verify code signature"

With an additional message:

Gained access rights that are not allowed by the provisioning profile

I don't understand why this is a problem only sometimes . I seem to fix the problem by creating a new version that is identical besides the build number and download it.

What could I be doing wrong? The only "right" my app registers is keychain access, but there is no toggle for that for the right to its app id in the developer portal.