This makes it accept keys with the same names as what is returned back to the caller, allowing for a more consistent experience.
It isn't every touched by anything other than UserDecodePrivileges() and UserEncodePrivileges().