I was just looking at the claim code... code, which doesn't store the same IDs. The docs suggest that they should be available on a system/issuer/program level too, but they currently aren't, and I suspect for the reasons you've highlighted. Probably worth bringing @brianloveswords into the conversation.