Ensure the tests are actually enabled for the restrictKeys entry.  The existing container ID test now really has all the bells and whistles.