biss keys are now shown as entitlements