Fail-open mode is entered or left in a secchan "periodic" callback, which may not be called immediately after the connection to the controller actually comes up. This can cause the fail-open local-packet CB to locally handle messages from the datapath and drop them, causing the controller to think that it's being ignore and drop the connection. Thanks to Dan for raising the issue.