This turned out to be an issue with browserstack. They rewrite the entitlements as part of their ingest process.