- identity lookup now returns separate list for changed, unchanged and invalid identities