You may be referring to line 172 but I think that's still just looking up a record for this consumer and virt UUID, it doesn't mean there isn't another consumer with the same virt-uuid reporting it more recently.

Pretty sure we should not be wiping out all host restricted ents here.