afaik installing a configuration profile isn't supported with lockdown mode, so you have to pick one. but neat hack. I've installed hosted-profiles (.mobileconfig) files without factory-reset, curious why didn't you go for that route? Just to make it harder?