What are these "Module Access Policy" records in my Update Set?

[jmiskey]

We are using Tokyo.

I have been creating update sets for years, and all of a sudden, I see a bunch of "Module Access Policy" records in my update set.  I am not sure why they are there or what I did that created these records.  All I have been doing is updating a Workflow.  

I found this article: https://docs.servicenow.com/en-US/bundle/tokyo-platform-security/page/administer/key-management-fram... but found it very confusing.  I cannot say I really understand it.

Does anyone know how these records are getting corrected?  Should I remove them from my update set before promoting it?

Thanks

[Carlos Soriano]

** Bump **

[Eli7]

bumping again we have the same question

[NMarrero]

*** Another Bump**  Same question here.

[Brian Doyle1]

Just noticed the same on our production environment when looking at the default update set in the global scope.  These appear to align with dates and times that we have cloned our production environment down over sub-prod environments.  I'd imagine you wont need these contained within your update sets that contain changes.

Hope that helps. 

Thanks!