I have a full trust Windows desktop app packaged using .wapproj + appxmanifest. I need it to run a background process from a separate executable that exposes a network service (yggstack).

Before I needed a separate executable app had

<desktop2:Extension Category="windows.firewallRules">
  <desktop2:FirewallRules Executable="App\App.exe">
    <desktop2:Rule Direction="in" IPProtocol="TCP"
                   Profile="all"
                   LocalPortMin="13456"
                   LocalPortMax="13456" />
  </desktop2:FirewallRules>
</desktop2:Extension>

And then I could listen on 13456.

Now I can bundle the yggstack.exe with my app, but I am unable to define firewall rules for it.

<desktop2:Extension Category="windows.firewallRules">
  <desktop2:FirewallRules Executable="App\App.exe">
    <desktop2:Rule Direction="in" IPProtocol="TCP"
                   Profile="all"
                   LocalPortMin="13456"
                   LocalPortMax="13456" />
  </desktop2:FirewallRules>
  <desktop2:FirewallRules Executable="App\yggstack.exe">
    <desktop2:Rule Direction="in" IPProtocol="TCP"
                   Profile="all"
                   LocalPortMin="5090"
                   LocalPortMax="5090" />
  </desktop2:FirewallRules>
</desktop2:Extension>

Adding new FirewallRules element leads to

AppxManifest.xml : error APPX0501: Validation error. error C00CE014: App manifest validation error: The app manifest must be valid as per schema: Line 53, Column 8, Reason: Element '{}FirewallRules' is unexpected according to content model of parent element '{}Extension'.

Is it possible to include another .exe and have firewall rules defined for it? How?