It seems that the way forward is to use <project_license>LicenseRef-proprietary</project_license> (looking at libappstream-glib) but the documentation doesn't mention it anywhere