apns: agent can enter gateway; can leave gateway