Sync with Netflix CL 1930827

Made the key provision a little more space efficient by storing
the list of valid origins with the NamedKey, rather than
storing a copy of the NamedKey for each origin.