It doesn't appear that you can rename the controlset keys as there are protected keys somewhere downstream. I'm sure I could trace it back and find them eventually but I fear changing permissions might cause more harm than good. I have opted to instead build a new VM and to migrate the data over to that.
Interesting issue, however. My assigned engineer has put in a PR regarding the issue. I am sure it's happened before but no one noticed that this was the actual issue.