I was told by support that this is "expected behavior because the
process that Apple uses to grab that key can be inconsistent." And Jamf
support said that I should run a recon after the reissue key policy
runs. I already have a recon as part of that...
I'm a couple years late, but could we not place a script in Self Service
for the user to run to alter screen recording settings? Apologies if
this has been answered in the years since this was asked, but I'm not
seeing any solutions other than deploy...