Total noob to Windows everything, so pardon if this is obvious/has been mentioned in scrollback, but it also struck me as odd that I'm enforcing a key with puppet at path

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\InactivityTimeoutSecs

but auditing it at

HKEY_LOCAL_MACHINE

as the first part of the path ¯\_(ツ)_/¯