Please provide instructions for manual setup a-la Island/Insular for use with CalyxOS's wonderful secondary work profile

[nad0vs]

Basically Calyx now allows to attach a work profile to a full secondary user.
It's great and it works mostly fine with Insular/Island if manual setup is followed
https://secure-system.gitlab.io/Insular/setup.html

just instead of

pm create-user --profileOf 0 --managed Insular

I use pm create-user --profileOf 10 --managed Insular

And follow through the rest.

Obviously it doesn't work for Shelter (I tried poking around, replacing device admin receiver's name etc. no budge)
I very much prefer Shelter to Insular on account of better file shuttle implementation
And it would be very nice to be able to provision it with full secondary work profiles, and maybe it can be done with just proper instruction and adb (rooted device), after all it does work for Insular...

[nad0vs]

Okay I managed to get it running (you have to configure shelter first ) and the situation has grown... intricate

Looks like it runs fine when set up on its own but when both device owner and SECONDARY have provisioned work profiles with configured profile managers things get profoundly, massively gnarly - I will make a separate issue