This is the kind of stuff where it would be nice to have a separation between "you have new entitlement certs" and "you have new entitlements". 

Maybe a better model going forward would be "please add Content Foo to the system" and then we try to figure out if the entitlement status is valid, or how to fix it (or track it) ifs it's not. But I digress...