fix for BARA-6 and generally get security working properly with connection meta labels