JAMF Pro & NextDNS Works Manually, Doesn't from JAMF Deployment

Hi,

We are trying to keep our devices connected to a controlled DNS server regardless of their network and not just from school. When we're trying to achieve this, all works well if I manually install a config from a site on the iPad, but when I deploy a config to do exactly the same thing, and get the same "visual" results on an iPad, DNS doesn't work. 

Anyone got ideas about what's going on and how would I go about achieving this without an pseudo-VPN app?