To fully support multiple SDI keys, the NICI health check process runs periodically and creates an inherited rights mask for the CN=KAP.CN=Security object. An inherited rights mask is created automatically to address a previous security right issues.