Alternatively at request ingress time you could take all original header names and save them, and at egress time you could use that list to drive which keys to

Alternatively at request ingress time you could take all original header names and save them, and at egress time you could use that list to drive which keys to emit? Then you wouldn't need to maintain a list of what is internal and you wouldn't have to do any trie lookups.