This is not supposed to happen, we don't know how it is possible but we are seeing this. We replace the unconditional access with a test and an error log in the meantime.